CLSA-2026-1788980919 TuxCare security update for xmldom (5 CVEs)

🗓️ 09 Sep 2026 19:08:39Reported by GoogleType

osv🔗 osv.dev👁 8 Views

TuxCare security update for xmldom library fixing 5 CVEs in version 0.6.0-tuxcare.4.

Reporter	Title	Published	Views	Family All 206
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in xmldom	6 Oct 202613:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in xmldom	28 Sep 202614:21	–	ibm
BDU FSTEC	The vulnerability of the appendElement() function in the XML document access and management module XMLDOM allows a attacker to cause a service failure.	3 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Document.createProcessingInstruction() method in the lib/dom.js module, a module for defining methods for accessing and manipulating XML documents in the XMLDOM framework, allows an attacker to compromise the integrity of the protected information.	3 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Element.setAttribute() method in the XML Document Access and Management Module XMLDOM allows a attacker to perform cross-site scripting (XSS) attacks.	4 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Document.createElement() function in the XML document access and manipulation module XMLDOM allows attackers to bypass existing security mechanisms and perform cross-site scripting (XSS) attacks.	4 Sep 202600:00	–	bdu_fstec
Chainguard	CVE-2026-83611 vulnerabilities	11 Sep 202608:54	–	cgr
Chainguard	CVE-2026-83615 vulnerabilities	11 Sep 202608:54	–	cgr
Chainguard	CVE-2026-83616 vulnerabilities	11 Sep 202608:54	–	cgr
Circl	CVE-2026-83605	8 Sep 202622:36	–	circl

10 Sep 2026 02:30Current

7.2High risk

Vulners AI Score7.2

CVSS 48.7

EPSS0.00619

SSVC

xmldom TuxCare security update library CVEs