THREAT OPS › Threat News › [GHSA] GHSA-6h8r-xr42-gp59 (medium) — xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
[GHSA] GHSA-6h8r-xr42-gp59 (medium) — xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
GHSA-6h8r-xr42-gp59 Severity: medium CVE: CVE-2026-83611
xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
## Summary
xmldom's parser silently accepts a **not-well-formed end tag** whose valid name is followed by trailing content — e.g. `</a⏎junk>`. The element is closed, the trailing content is discarded, and no error is repor
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2026-83611cve
Original source: https://github.com/advisories/GHSA-6h8r-xr42-gp59