Skip to content

[GHSA-8gc5-j5rx-235r] fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)#7220

Merged
advisory-database[bot] merged 1 commit intoyuezk/advisory-improvement-7220from
yuezk-GHSA-8gc5-j5rx-235r
Mar 25, 2026
Merged

[GHSA-8gc5-j5rx-235r] fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)#7220
advisory-database[bot] merged 1 commit intoyuezk/advisory-improvement-7220from
yuezk-GHSA-8gc5-j5rx-235r

Commits

Commits on Mar 24, 2026