Skip to content

fix: upgrade @xmldom/xmldom to patched version (CVE-2026-83605) - #1096

Open
anupamme wants to merge 1 commit into
cloudinary:masterfrom
anupamme:fix-repo-cloudinary-video-player-cve-2026-83605-xmldom
Open

anupamme wants to merge 1 commit into
cloudinary:masterfrom
anupamme:fix-repo-cloudinary-video-player-cve-2026-83605-xmldom

Conversation

@anupamme

@anupamme anupamme commented Oct 1, 2026

Copy link
Copy Markdown

This upgrades @xmldom/xmldom (currently 0.8.13) to 0.9.11, 0.8.14, which carries the fix for CVE-2026-83605. The package is present in this repository's dependency tree; I have not verified that your code reaches the affected function.

Reference: CVE-2026-83605

What changed

  • package.json
  • package-lock.json

Verification

No automated check could be run against this repository, so this change is unverified beyond review. Please treat it as a suggestion.


Automated security fix by OrbisAI Security

Automated dependency upgrade by OrbisAI Security
@anupamme
anupamme requested a review from a team as a code owner October 1, 2026 10:21
@netlify

netlify Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for cld-vp-esm-pages ready!

Name Link
🔨 Latest commit a3cb53e
🔍 Latest deploy log https://app.netlify.com/projects/cld-vp-esm-pages/deploys/6abe341b9ae0140008a96c5a
😎 Deploy Preview https://deploy-preview-1096--cld-vp-esm-pages.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for cld-video-player ready!

Name Link
🔨 Latest commit a3cb53e
🔍 Latest deploy log https://app.netlify.com/projects/cld-video-player/deploys/6abe341b2836780008e6e18f
😎 Deploy Preview https://deploy-preview-1096--cld-video-player.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant