Skip to content
Fencer Vulns
high 7.5

CVE-2026-34601 json

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

published 2026-04-01 7 mo ago modified 2026-09-10 1 mo ago also EUVD-2026-18460 , GHSA-wh4c-j3r5-mjhp

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 42%
public exploits
0
none known

Summary

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In xmldom versions 0.6.0 and prior and @xmldom/xmldom prior to versions 0.8.12 and 0.9.9, xmldom/xmldom allows attacker-controlled strings containing the CDATA terminator ]]> to be inserted into a CDATASection node. During serialization, XMLSerializer emitted the CDATA content verbatim without rejecting or safely splitting the terminator. As a result, data intended to remain text-only became active XML markup in the serialized output, enabling XML structure injection and downstream business-logic manipulation. This issue has been patched in xmldom version 0.6.0 and @xmldom/xmldom versions 0.8.12 and 0.9.9.

Patch / fix

  • npm @xmldom/xmldom 0.8.12, 0.9.9
  • xmldom_project xmldom 0.8.12, 0.9.9
  • node-xmldom Debian 14 0.9.9-1

debian advisories DEBIAN-CVE-2026-34601

  • python-jupyterlab-templates openSUSE Tumbleweed 0.5.3-1.1
  • heroic-games-launcher openSUSE Tumbleweed 2.20.1-5.1

opensuse advisories openSUSE-SU-2026:10506-1openSUSE-SU-2026:10497-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-34601 updated cvss 7.5

xmldom: xmldom: XML structure injection via CDATA terminator

  • Red Hat Migration Toolkit for Applications 8 redhat-user-workloads/ocp-art-tenant/art-images/art-images Red Hat Build of Podman Desktop podman-desktop-macos-1-0, podman-desktop-windows-1-0 Red Hat Developer Hub 1 rhdh/rhdh-hub-rhel9/rhdh-hub-rhel9 Red Hat Fuse 7 xmldom Red Hat OpenShift AI (RHOAI) rhoai/odh-mlflow-rhel9/odh-mlflow-rhel9 Red Hat OpenShift Container Platform 4 redhat-user-workloads/ocp-art-tenant/art-images/art-images
    +2 more products
    Red Hat OpenShift Dev Spaces redhat-user-workloads/devspaces-tenant/devspaces/code-rhel9/code-rhel9 Red Hat Self-service automation portal 2 redhat-user-workloads/ansible-plugins-tenant/ansible-plugins/ansible-plugins
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
7 mo ago

Exploit prediction

0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/xmldom/xmldom/security/advisories/GHSA-wh4c-j3r5-mjhp referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
GitHub 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected packages

ecosystem package affected fixed in
npm xmldom
<=0.6.0
 no fix listed
npm @xmldom/xmldom
<0.8.12
>=0.9.0, <0.9.9
0.8.12
0.9.9

Affected products

  • xmldom xmldom
  • Red Hat Migration Toolkit for Applications 8
  • Red Hat Red Hat Build of Podman Desktop
  • Red Hat Red Hat Developer Hub
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Dev Spaces
  • Red Hat Self-service automation portal 2

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.