Hi,

The following vulnerability was published for qt6-base.

CVE-2026-19248[0]:
| QDomDocument XML parsing is vulnerable to a remotely-triggerable
| denial-of-service crash when processing untrusted input.

https://qt-project.atlassian.net/browse/QTBUG-147191
https://github.com/qt/qtbase/commit/1303f05b33bb777626644729dd3b1330f60ecb7f (6.10)


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-19248
https://www.cve.org/CVERecord?id=CVE-2026-19248

Please adjust the affected versions in the BTS as needed.