ROOT-APP-NPM-CVE-2026-34601 CVE-2026-34601 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-34601 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

CVE-2026-34601

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. In xmldom versions 0.6.0 and prior and @xmldom/xmldom prior to versions 0.8.12 and 0.9.9, xmldom/xmldom allows attacker-controlled strings containing the CDATA terminator to be inserted into a...