All products

Red Hat Fuse 7/xmldom-0.1.27.tgz

Red Hat · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
xmldom: Processing Instruction Target Injection Bypasses requireWellFormedCVE-2026-83616 · GHSA-C7Q8-3CH8-VQPV @xmldom/xmldomxmldom npmRed Hat High Fix reported
xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing contentCVE-2026-83611 · GHSA-6H8R-XR42-GP59 @xmldom/xmldomxmldom npmRed Hat Medium Fix reported
xmldom: Element name injection via createElement() bypasses requireWellFormedCVE-2026-83607 · GHSA-W2RR-34G9-RVRJ @xmldom/xmldomxmldom npmRed Hat High Fix reported