Beveiligingsadvies

CVE-2026-44665

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-13 15:24:54

Laatst bijgewerkt 2026-05-18 15:04:53

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it breaks the attribute value into multiple attributes. This gives the room for an attacker to insert unwanted attributes to the XML/HTML. This vulnerability is fixed in 1.1.7.

← Alle CVE's bekijken Bekijk op cve.org ↗