CVE-2026-83612 | xmldom up to 0.9.11 HTML Parser DOMParser.parseFromString redos

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in xmldom up to 0.9.11. This impacts the function DOMParser.parseFromString of the component HTML Parser. The manipulation results in inefficient regular expression complexity.

This vulnerability is reported as CVE-2026-83612. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More