CVE-2026-83611 | xmldom up to 0.8.14/0.9.11 End-Tag Validator lib/sax.js DOMParser.parseFromString input validation

September 1, 2026 Yanac

A vulnerability has been found in xmldom up to 0.8.14/0.9.11 and classified as problematic. This issue affects the function DOMParser.parseFromString of the file lib/sax.js of the component End-Tag Validator. This manipulation causes improper input validation.

This vulnerability is tracked as CVE-2026-83611. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More