voltrue2 / in-app-purchase

A Node.js module for in-App-Purchase for iOS, Android, Amazon and Windows.
http://iap.gracenode.org
Other
1.05k stars 289 forks source link

nodejs - security issue - xmldom allows multiple root nodes in a DOM Critical #371

Open sudhirgelani opened 1 month ago

sudhirgelani commented 1 month ago

xmldom allows multiple root nodes in a DOM Critical Misinterpretation of malicious XML input M

3 opened 2 months ago • Detected in xmldom (npm) • application_src/package-lock.json