Namespace Management Vulnerability in xmldom by xmldom
CVE-2026-83615
8.7HIGH
What is CVE-2026-83615?
The xmldom module, utilized for parsing and serializing XML in JavaScript, is susceptible to a vulnerability related to namespace management. In affected versions prior to 0.8.15 and 0.9.12, the appendElement function in sax.js improperly manages a growing number of namespace maps. This results in excessive memory consumption, potentially leading to application crashes during XML parsing. Developers are urged to upgrade to the fixed versions to safeguard against memory exhaustion and ensure robust XML handling.
Affected Version(s)
xmldom >= 0.1.5, <= 0.6.0
xmldom >= 0.7.0, < 0.8.15 < 0.7.0, 0.8.15
xmldom >= 0.9.0, < 0.9.12 < 0.9.0, 0.9.12