DEBIAN-CVE-2026-41673

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, seven recursive traversals in lib/dom.js operate without a depth limit. A sufficiently deeply nested DO...

CVE-2026-41673 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, saf, wazuh-dashboard, sqlpad, npm, librechat, wazuh-dashboard-fips, arangodb, actions-runner, gitlab-rails-ce-fips...