Search CVE reports


Toggle filters

1 – 10 of 24 results


CVE-2026-83619

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83618

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.10 until 0.9.12, the requireWellFormed: true serializer validates DocumentType.publicId and DocumentType.systemId...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83617

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.11 until 0.9.12, the requireWellFormed: true element and attribute name checks use the anchored QName_exact...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83616

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83615

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83614

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.3.0 through 0.6.0, two independent quadratic...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83613

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMHandler.startElement in...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83612

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HTML-mode parsing through DOMParser.parseFromString() mishandles a mixed-case closing tag...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83611

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString() can...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-83610

Medium priority
Needs evaluation

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and...

1 affected package

node-xmldom

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-xmldom Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages