fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)
High severity
GitHub Reviewed
Published
Feb 14, 2026
in
NaturalIntelligence/fast-xml-parser
•
Updated Feb 27, 2026
Give feedback on Dependabot alerts