GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
3 advisories
xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator
High
CVE-2026-83617
was published
for
@xmldom/xmldom
(npm)
Sep 8, 2026
xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path
High
CVE-2026-83609
was published
for
@xmldom/xmldom
(npm)
Sep 8, 2026
xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator
High
CVE-2026-83618
was published
for
@xmldom/xmldom
(npm)
Sep 8, 2026
ProTip!
Advisories are also available from the
GraphQL API