391 matches found
CVE-2026-83610
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:11+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-6gmq-8vp8-gcm6...
NPM: xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
NPM: xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
Summary An EntityReference node can be created with an invalid, attacker-controlled name through Document.createEntityReferencename. When this node is serialized directly with: js serializer.serializeToStringref, requireWellFormed: true the invalid nodeName is emitted into the serialized XML...
GHSA-6GMQ-8VP8-GCM6 xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
Summary An EntityReference node can be created with an invalid, attacker-controlled name through Document.createEntityReferencename. When this node is serialized directly with: js serializer.serializeToStringref, requireWellFormed: true the invalid nodeName is emitted into the serialized XML...
EUVD-2026-69222
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization...
CVE-2026-83619
A flaw was found in xmldom, a JavaScript module used for processing XML documents. A remote attacker could exploit a vulnerability in the XML parser by submitting a specially crafted XML input. This could lead to a Denial of Service DoS, causing the affected system to become unresponsive by...
UBUNTU-CVE-2026-83609
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83608
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83616
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83612
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83617
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83608
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83618
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83615
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83619
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83613
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
Linux Distros Unpatched Vulnerability : CVE-2026-83611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...
Linux Distros Unpatched Vulnerability : CVE-2026-83606
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instructi...
Linux Distros Unpatched Vulnerability : CVE-2026-83619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in...