CVE-2026-83615 | xmldom up to 0.6.0/0.8.14 Namespace Map Cloning lib/sax.js appendElement heap-based overflow

September 1, 2026 Yanac

A vulnerability identified as problematic has been detected in xmldom up to 0.6.0/0.8.14. This affects the function appendElement of the file lib/sax.js of the component Namespace Map Cloning. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is reported as CVE-2026-83615. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More