AZL-99345
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99345.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-99345
- Upstream
- Published
- 2026-09-01T15:17:38Z
- Modified
- 2026-09-06T05:31:44Z
- Summary
- CVE-2026-83608 affecting package python-tensorboard 2.16.2-6
- Details
-
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, the DOCUMENTTYPENODE branch in lib/dom.js validates publicId, systemId, and internalSubset under requireWellFormed: true but emits DocumentType.name verbatim. A name containing > or whitespace can terminate the
- References