THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-73569 — fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through ad

[NVD] CVE-2026-73569 — fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through ad

lownvdPublished 2026-08-13

CVE-2026-73569 CVSS: None Published: 2026-08-13T18:18:19.803

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through addInputEntities(). addInputEntities() resets maxTotalExpan

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73569