AboutCommunity

metro.co.uk 15 packages

Last scanned on Oct 27 at 05:51 PM
xmldom 0.1.1 - 0.6.0Vulnerable
A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
Script
https://cdn.metro.co.uk/base/metro-player/1.1.128/player.js
License
MIT
Footprint
14 KB
Vulnerabilities
CriticalGHSA-crh6-fp67-6883
xmldom allows multiple root nodes in a DOM
Affected versions >=0
CriticalGHSA-9pgh-qqpf-7wqj
Withdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom
Affected versions >=0
ModerateGHSA-5fg8-2547-mr8q
Misinterpretation of malicious XML input
Affected versions >=0
Matched Modules
Version distribution in production
45
0.6.0
42
0.1.27
42
0.1.29
42
0.1.30
42
0.1.31
41
0.5.0
Also used on 52 websites
imdb.com
78 packages
tenor.com
71 packages
metro.co.uk
15 packages
thenorthface.com
76 packages
RepositoryHomepage
w3cdomxmlparserjavascript+2
jinjinyun
jindw
next 9.5.4 - 13.0.0VulnerableOutdated
The React Framework
rauchg
timneutkens
vercel-release-bot
@babel/runtime 7.18.2 - 7.19.4Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
whatwg-fetch 3.3.0 - 3.3.1Outdated
A window.fetch polyfill.
jakechampion
mattandrews
mislav
@xmldom/xmldom 0.7.0 - 0.8.2Outdated
A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
w3cdomxmlparserjavascript+3
karfau
karfau
lodash.mergewith 4.6.1 - 4.6.2
The Lodash method `_.mergeWith` exported as a module.
lodash-modularizedmergewith
jdalton
mathias
is-function 1.0.2
is that thing a function? Use this module to find out
polyfillis-functionie6
grncdr
grncdr
clipboard 2.0.7Outdated
Modern copy to clipboard. No Flash. Just 2kb
clipboardcopycut
zenorocha
obetomuniz
vitormalencar
react-query 0.0.11 - 0.0.15Outdated
Hooks for managing, caching and syncing asynchronous and remote data in React
tannerlinsley
tkdodo
safe-json-parse 2.0.0 - 4.0.0
Parse JSON safely without throwing
raynos
raynos
keycode 2.1.2 - 2.2.1
Convert between keyboard keycodes and keynames and vice versa.
keyboardkeycodekeyboardeventasciikeydown+4
timoxley
timoxley
mux.js 5.7.0 - 5.14.1Outdated
A collection of lightweight utilities for inspecting and manipulating video container formats.
videocontainertransmuxmuxplayer+5
+19
phale
ddashkevich
roman-bc
url-toolkit 2.2.2 - 2.2.3Outdated
Build an absolute URL from a base URL and a relative URL (RFC 1808). No dependencies!
urlrelativeabsoluteparser
tjenkinson
tjenkinson
videojs-vtt.js 0.15.0 - 0.15.4Outdated
A JavaScript implementation of the WebVTT specification, forked from vtt.js for use with Video.js
vttwebvtttrackcaptionssubtitles+1
+17
phale
ddashkevich
roman-bc
bootstrap-vue 2.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
BootstrapBootstrap v4Bootstrap for VueVueVue.js+54
+1
xanf
jackmu95
pi0

Popular search queries

webpack.js.org
urlreact-scriptsreactlottie-apireact-helmet-async+7 packages
github.com
color-convert@headlessui/reacthoist-non-react-staticsreactstraplit-html+60 packages
pinterest.com
lodashrelay-runtimereact-relayreact-uselodash-es+51 packages

Popular packages

react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites