The NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte.
{
"nvd_published_at": "2026-03-18T21:16:26Z",
"github_reviewed_at": "2026-03-17T17:12:34Z",
"severity": "MODERATE",
"github_reviewed": true,
"cwe_ids": [
"CWE-787"
]
}