Skip to content
Fencer Vulns
high 7.5

CVE-2026-41674 json

xmldom: XML injection through unvalidated DocumentType serialization

published 2026-04-22 6 mo ago modified 2026-09-10 1 mo ago also EUVD-2026-28289 , GHSA-f6ww-3ggp-fr8h

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 47%
public exploits
0
none known

Summary

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, the package serializes DocumentType node fields (internalSubset, publicId, systemId) verbatim without any escaping or validation. When these fields are set programmatically to attacker-controlled strings, XMLSerializer.serializeToString can produce output where the DOCTYPE declaration is terminated early and arbitrary markup appears outside it. This issue has been patched in versions @xmldom/xmldom versions 0.9.10 and 0.8.13.

Patch / fix

  • npm @xmldom/xmldom 0.8.13, 0.9.10
  • Red Hat Red Hat Developer Hub 1.8 1779841586
  • Red Hat Red Hat Developer Hub 1.9 1781187342
  • Red Hat Red Hat OpenShift Container Platform 4.20 1779864090
  • Red Hat Red Hat OpenShift Container Platform 4.21 1779252093
  • node-xmldom Debian 14 0.9.10-1

debian advisories DEBIAN-CVE-2026-41674

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-41674 updated cvss 7.5

xmldom: xmldom: Arbitrary XML markup injection

  • Red Hat Build of Podman Desktop rh-podman-desktop.git
    affected: no fix available
  • Red Hat Fuse 7 xmldom
    affected: no fix planned “Will not fix”
  • Red Hat Self-service automation portal 2 ansible-automation-platform/automation-portal
    affected: no fix available
  • Red Hat Developer Hub 1.8 rhdh/rhdh-hub-rhel9 1779841586
    fixed: vendor fix RHSA-2026:21338
  • Red Hat Developer Hub 1.9 rhdh/rhdh-hub-rhel9 1781187342
    fixed: vendor fix RHSA-2026:26234
  • Red Hat OpenShift Container Platform 4.20 openshift4/ose-agent-installer-ui-rhel9 1779864090
    fixed: vendor fix RHSA-2026:21703
  • Red Hat OpenShift Container Platform 4.21 openshift4 1779252093
    fixed: vendor fix RHSA-2026:20034
  • Red Hat Developer Hub 1.8 rhdh/rhdh-rhel9-operator 1779841292, rhdh/rhdh-operator-bundle 1779846497 Red Hat Developer Hub 1.9 rhdh/rhdh-rhel9-operator 1781187028, rhdh/rhdh-operator-bundle 1781191254
    not affected: vulnerable code not present
show 2 more
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-mlflow-rhel9
    not affected: component not present
  • Red Hat OpenShift Container Platform 4.20 openshift4/frr-rhel9 1779777627, openshift4/ose-cli-rhel9 1779775173, openshift4/ose-pod-rhel9 1779778546, openshift4/ose-etcd-rhel9 1779780338, openshift4/ose-tests-rhel9 1779785866, openshift4/ose-tools-rhel9 1779777643, +184 more Red Hat OpenShift Container Platform 4.21 openshift4 1778708658, openshift4 1779116155, openshift4 1779250207, openshift4 1779250217, openshift4 1779250232, openshift4 1779250235, +177 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
6 mo ago

Exploit prediction

0.56% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/xmldom/xmldom/security/advisories/GHSA-f6ww-3ggp-fr8h referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected packages

ecosystem package affected fixed in
npm @xmldom/xmldom
<0.8.13
>=0.9.0, <0.9.10
0.8.13
0.9.10
npm xmldom
<=0.6.0
 no fix listed

Affected products

  • xmldom xmldom
  • Red Hat Red Hat Developer Hub 1.8
  • Red Hat Red Hat Developer Hub 1.9
  • Red Hat Red Hat OpenShift Container Platform 4.20
  • Red Hat Red Hat OpenShift Container Platform 4.21
  • Red Hat Red Hat Build of Podman Desktop
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Self-service automation portal 2

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.