GHSA-8r6m-32jq-jx6qPublished
fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-73569 · Microsoft / collected KEV context
cve-program · CVE-2026-73569
- https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8r6m-32jq-jx6q
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e546e03987662de5495d050b5fba26bea65383f
- https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.10.1
nvd · CVE-2026-73569
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e546e03987662de5495d050b5fba26bea65383f
- https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.10.1
- https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8r6m-32jq-jx6q
osv · GHSA-8r6m-32jq-jx6q
- https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8r6m-32jq-jx6q
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e546e03987662de5495d050b5fba26bea65383f
- https://github.com/NaturalIntelligence/fast-xml-parser
- https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.10.1
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.