CVE-2026-83609 | xmldom up to 0.9.11 lib/grammar.js createElementNS xml injection

September 1, 2026 Yanac

A vulnerability labeled as critical has been found in xmldom up to 0.9.11. Affected by this vulnerability is the function createElementNS of the file lib/grammar.js. Such manipulation leads to xml injection.

This vulnerability is traded as CVE-2026-83609. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More