Skip to content
Threat Feed
Subscribe

Product

@Xmldom/Xmldom (>= 0.9.0, <= 0.9.11)

1 brief RSS
medium advisory

Denial of Service via Quadratic Memory Consumption in xmldom

The xmldom parser suffers from a quadratic memory complexity flaw during namespace processing, allowing unauthenticated attackers to trigger process OOM crashes using small, crafted XML payloads.

xmldom +2 denial-of-service vulnerability xml
1t 1c