CVE-2023-26920

MEDIUM

fast-xml-parser <4.1.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.

References (3)

Scores

CVSS v3 6.5
EPSS 0.0021
EPSS Percentile 42.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-1321
Status published
Products (2)
naturalintelligence/fast_xml_parser < 4.1.2
npm/fast-xml-parser 0 - 4.1.2npm
Published Dec 12, 2023
Tracked Since Feb 18, 2026