CVE-2026-83619 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83619 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83619 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498558...

CVE-2026-83619

creationtimestamp| type| source ---|---|--- 2026-09-01 16:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/63lwwxae36rgq 2026-09-08 22:35:30+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-x4fp-j954-r2f4...

UBUNTU-CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression / \t\n\r+$/g. For an end tag containing a long whitespace run...