kdydesign/nuxt-fontagon

Audit gives several issues on XML / XMLDOM, from low to critical

Opened this issue · 0 comments

the-missing-pink commented

The nuxt audit gives several issues:

  • [moderate] Misinterpretation of malicious XML input [issue]
  • [low] Misinterpretation of malicious XML input [issue]
  • [critical] Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom [issue]
  • [critical] xmldom allows multiple root nodes in a DOM [issue]