CVE-2026-83612

creationtimestamp| type| source ---|---|--- 2026-09-08 21:33:08+00:00| seen| https://gist.github.com/alon710/6001224d6aa2414b1f8b69a0a75f3dac 2026-09-08 22:35:37+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-6mj3-qw4j-hgrw...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83612 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83612 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499086...

UBUNTU-CVE-2026-83612

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HTML-mode parsing through DOMParser.parseFromString mishandles a mixed-case closing tag for the script, style, textarea, or title raw-text elements...