01 Record

CVE-2026-73569

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

HighPUBLISHEDCNA: GitHub_M

Base score8.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

02 Description

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

Published: 2026-08-13 17:45Z1 DAY AGO
Last updated: 2026-08-13 18:40Z1 DAY AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 8.7)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-776
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: 4e257370b1333fd0cc68951e1ef2b1a8be894b77f0016b7139e2ca8a1434b307

VendorProductVersionsPlatforms

NaturalIntelligencefast-xml-parser>= 5.9.3, < 5.10.1—