Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
karfau/xmldom may let attackers run code
published 3 months ago
Summary
The xmldom library from the karfau project contains four security weaknesses that could allow a malicious user to execute unwanted code on your system. Update to version 0.6.0‑tuxcare.2, which includes the fixes, to protect your applications that rely on this library.
What to do
- Update karfau xmldom to version 0.6.0-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | karfau | xmldom |
>= 0.6.0-tuxcare.0, < 0.6.0-tuxcare.2 Fix: upgrade to 0.6.0-tuxcare.2
|
Original advisory text
TuxCare security update for xmldom (4 CVEs)
TuxCare rebuilt xmldom to address 4 CVEs. Fixed in 0.6.0-tuxcare.2.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1778114662 · OSV
Track software like this
Free during beta