https://bugzilla.redhat.com/show_bug.cgi?id=2486577
2486577 – CVE-2026-41673 onnxruntime: xmldom: Denial of Service via deeply nested XML documents...
denial of servicecveonnxruntimexmldomvia
https://advisories.gitlab.com/npm/@xmldom/xmldom/CVE-2026-83618/
xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line...
CVE-2026-83618 xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator: An embedded line terminator...
xmldomdoctypevalidationbypassablevia
https://www.sentinelone.com/vulnerability-database/cve-2026-83609/
CVE-2026-83609: xmldom XXE Vulnerability in JavaScript Parser
Sep 1, 2026 - CVE-2026-83609 is an XXE vulnerability in xmldom JavaScript parser. Learn about its impact, affected versions, and mitigation methods for this markup injection...
cvexmldomxxevulnerabilityjavascript