https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:55:09 +0000 https://cve.radiocsirt.org/vuln/cve-2022-37616 <p>A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states &#34;we are in the process of marking this report as invalid&#34;; however, some third parties takes the position that &#34;A prototype injection/Prototype pollution is not just when global objects are polluted with recursive merge or deep cloning but also when a target object is polluted.&#34;</p> <p>A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states &#34;we are in the process of marking this report as invalid&#34;; however, some third parties takes the position that &#34;A prototype injection/Prototype pollution is not just when global objects are polluted with recursive merge or deep cloning but also when a target object is polluted.&#34;</p> https://cve.radiocsirt.org/vuln/cve-2022-37616