CVE-2026-83619
1 advisory.
npm/@xmldom/xmldom CVE-2026-83619: high, EPSS 0.52%
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
Action: Upgrade @xmldom/xmldom to 0.8.15 or later.
npm i @xmldom/xmldom@0.8.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 0.8.15 | - |
Fixed versions
| 0.8.15 |
Sources
- osv: GHSA-x4fp-j954-r2f4
- https://github.com/xmldom/xmldom/security/advisories/GHSA-x4fp-j954-r2f4
- https://nvd.nist.gov/vuln/detail/CVE-2026-83619
- https://github.com/xmldom/xmldom/pull/1072
- https://github.com/xmldom/xmldom/commit/3abb0934f5a8a84d83a1f9cde0f2bd04c08b2a09
- https://github.com/xmldom/xmldom
- https://github.com/xmldom/xmldom/releases/tag/0.8.15
CVE-2026-83619 · published · modified · JSON