Skip to content

[GHSA-8gc5-j5rx-235r] fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)#7220

Open
yuezk wants to merge 1 commit intoyuezk/advisory-improvement-7220from
yuezk-GHSA-8gc5-j5rx-235r
Open

[GHSA-8gc5-j5rx-235r] fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)#7220
yuezk wants to merge 1 commit intoyuezk/advisory-improvement-7220from
yuezk-GHSA-8gc5-j5rx-235r

Commits

Commits on Mar 24, 2026