[GHSA] GHSA-vr34-hp96-76pp (high) — xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator

GHSA-vr34-hp96-76pp Severity: high CVE: CVE-2026-83618

xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator

## Summary

An embedded line terminator bypasses the `requireWellFormed` serializer check for a `DocumentType`'s publicId and systemId. The check was added to fix GHSA-f6ww-3ggp-fr8h; an id whose first line is a valid literal slips pa