xmldom
npm469 GitHub starsv0.6.0 · Apr 2021 · MIT (top-level declared license)
npm install xmldom- 16 known CVEs (16 in v0.6.0)
- 6.6M downloads/mo
- 36 versions
Description
A pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.
Licenses
Declared license
MIT (top-level declared license of xmldom)
Transitive dependency licenses
xmldom declares no runtime dependencies, so its license exposure is limited to its own MIT license.
This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.
License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.
Need xmldom approved? Get the full license and vulnerability report for your codebase. Scan free.
Scan freeVulnerabilities
| Affected range | CVE | CWE | CVSS | EPSS |
|---|---|---|---|---|
| <=0.6.0 | CVE-2022-39353 | CWE-1288, CWE-20 | 9.8 Critical severity advisories | 0.01272 |
| <=0.6.0 | CVE-2026-34601 | CWE-91 | 7.5 High severity advisories | 0.00536 |
| <=0.6.0 | CVE-2021-32796 | CWE-116 | 6.5 Medium severity advisories | 0.01358 |
| <=0.6.0 | CVE-2026-41673 | CWE-674 | 0.00882 | |
| <=0.6.0 | CVE-2026-41674 | CWE-91 | 0.00650 | |
| <=0.6.0 | CVE-2026-41672 | CWE-91 | 0.00650 | |
| <=0.6.0 | CVE-2026-41675 | CWE-91 | 0.00633 | |
| <=0.6.0 | CVE-2026-83611 | CWE-1286 | 0.00619 | |
| <=0.6.0 | CVE-2026-83608 | CWE-91 | 0.00612 | |
| <=0.6.0 | CVE-2026-83605 | CWE-91 | 0.00612 | |
| <=0.6.0 | CVE-2026-83616 | CWE-91 | 0.00612 | |
| <=0.6.0 | CVE-2026-83607 | CWE-91 | 0.00612 | |
| <=0.6.0 | CVE-2026-83613 | CWE-407 | 0.00604 | |
| <=0.6.0 | CVE-2026-83610 | CWE-116 | 0.00590 | |
| >=0.3.0 <=0.6.0 | CVE-2026-83614 | CWE-400, CWE-407 | 0.00590 | |
| >=0.1.5 <=0.6.0 | CVE-2026-83615 | CWE-770 | 0.00590 |
Version history
| Version | Published | License |
|---|---|---|
| 0.6.0 | Apr 2021 | MIT |
| 0.5.0 | Mar 2021 | |
| 0.4.0Yanked | Oct 2020 | |
| 0.3.0Yanked | Mar 2020 | |
| 0.2.1Yanked | Dec 2019 | |
| 0.2.0Yanked | Dec 2019 | |
| 0.1.31Yanked | Dec 2019 | |
| 0.1.30Yanked | Dec 2019 | |
| 0.1.29Yanked | Dec 2019 | |
| 0.1.27Yanked | Nov 2016 | |
| 0.1.26Yanked | Nov 2016 | |
| 0.1.25Yanked | Nov 2016 | |
| 0.1.24Yanked | Nov 2016 | |
| 0.1.22Yanked | Jan 2016 | |
| 0.1.21Yanked | Jan 2016 | |
| 0.1.20Yanked | Jan 2016 | |
| 0.1.19Yanked | Jan 2014 | |
| 0.1.18Yanked | Jan 2014 | |
| 0.1.17Yanked | Dec 2013 | |
| 0.1.16Yanked | May 2013 | |
| 0.1.15Yanked | Apr 2013 | |
| 0.1.14Yanked | Mar 2013 | |
| 0.1.13Yanked | Oct 2012 | |
| 0.1.12Yanked | Sep 2012 | |
| 0.1.11Yanked | Jun 2012 |
11 older releases
| Version | Published | License |
|---|---|---|
| 0.1.10Yanked | Jun 2012 | |
| 0.1.9Yanked | Jun 2012 | |
| 0.1.8Yanked | May 2012 | |
| 0.1.7Yanked | May 2012 | |
| 0.1.6Yanked | May 2012 | |
| 0.1.5Yanked | May 2012 | |
| 0.1.4Yanked | May 2012 | |
| 0.1.3Yanked | May 2012 | |
| 0.1.2Yanked | Feb 2012 | |
| 0.1.1Yanked | Jan 2012 | |
| 0.1.0Yanked | Jan 2012 |
npm install xmldom resolves to the 0.x line today. Older major lines may still receive fixes.
Popularity
- Downloads last month
- 6.6M
- Known dependents in this corpus
- 2,004
- GitHub stars
- 469
- OpenSSF score
- 7.6 / 10
FAQ
- What is the latest version of xmldom?
- The latest version of xmldom is 0.6.0, published April 2021.
- What license is xmldom under?
- xmldom declares MIT as its top-level declared license.
- Does xmldom have known vulnerabilities?
- xmldom has 16 known CVE-linked advisories across its published versions; 16 affect the latest version, v0.6.0.
- How do I install xmldom?
- Install xmldom with npm install xmldom.
- How do I generate an SBOM that includes xmldom?
- FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes xmldom. Generate an SPDX or CycloneDX SBOM free.