xml

• CVE-2026-40998 - Spring WS XPath XXE via StreamSource and SAXSource 2026-06-15
• CVE-2026-42231 - n8n XML webhook prototype pollution RCE 2026-05-02
• CVE-2026-42232 - n8n XML node prototype pollution RCE 2026-05-02
• XML external entities (XXE) — parser defaults 2026-04-25