[Git][security-tracker-team/security-tracker][master] Track fixed version for node-xmldom issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Sep 2 11:37:53 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a6d70651 by Salvatore Bonaccorso at 2026-09-02T12:37:15+02:00
Track fixed version for node-xmldom issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -767,69 +767,69 @@ CVE-2026-83619 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/3abb0934f5a8a84d83a1f9cde0f2bd04c08b2a09 (0.8.15)
NOTE: 0.9.x is not affected by the vulnerability, mark first version in unstable as fixed version
CVE-2026-83618 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-vr34-hp96-76pp
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/7b2ec67e1750daadd0bb06c92e875e726544a362 (0.9.12)
CVE-2026-83617 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-jxjr-3g7g-3944
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/7b2ec67e1750daadd0bb06c92e875e726544a362 (0.9.12)
CVE-2026-83616 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/1cde3e31a07c41c87cfd368d6946aa477f16b4f9 (0.9.12)
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/3b694872bcb5c7e3cbadba961a4be2488750ce5b (0.8.15)
CVE-2026-83615 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/dabffe884e864eeecb1f515c716f875e1bc47ec1 (0.9.12)
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/954370f58c046223faf95ba77efcbc8ce014409d (0.8.15)
CVE-2026-83614 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/0748720b620555f8c222782dcab575cf0cf403b4 (0.9.12)
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/f40ccb861eee0acbf5ee4feb9a34932e87b329c9 (0.8.15)
CVE-2026-83613 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/cfb09b5dbeb035fdfedc9f01e2bbaf226bf47cf3 (0.9.12)
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/2c548f200cfec991cd5846627ef8f03542309213 (0.8.15)
CVE-2026-83612 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-6mj3-qw4j-hgrw
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/7ced40c06c28d151e996a97045018c3559ae4707 (0.9.12)
CVE-2026-83611 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/7b2ec67e1750daadd0bb06c92e875e726544a362 (0.9.12)
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/4430189660b0d380ee9c9ee7550a1358688e8828 (0.8.15)
CVE-2026-83610 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-6gmq-8vp8-gcm6
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/4664386e4f4d99d17b416a151dbe8323e245284b (0.9.12)
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/6c3fb5ffeafe7901ec928ce9010988dd716c94a0 (0.8.15)
CVE-2026-83609 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-3px3-54cx-rmw9
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: Fixed by: https://github.com/xmldom/xmldom/commit/7b2ec67e1750daadd0bb06c92e875e726544a362 (0.9.12)
CVE-2026-83608 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...)
- - node-xmldom <unfixed> (bug #1146473)
+ - node-xmldom 0.9.12-1 (bug #1146473)
NOTE: https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv
NOTE: https://github.com/xmldom/xmldom/pull/1071
NOTE: https://github.com/xmldom/xmldom/pull/1072
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6d7065164523613702f94531d7788c352a1f0f2
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6d7065164523613702f94531d7788c352a1f0f2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260902/c84efccf/attachment.htm>
More information about the debian-security-tracker-commits
mailing list