NNaturalIntelligence

Products

Exploited and recent CVEs

• CVE-2026-73569 High 8.7 fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits 0.5%
• CVE-2026-44664 Medium 6.1 fast-xml-builder: Comment Value bypass regex 0.2%
• CVE-2026-44665 Medium 6.1 fast-xml-builder: Attribute values with unwanted quotes can bypass malicious or unwanted attributes 0.2%
• CVE-2026-41650 Medium 6.1 fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters 0.2%
• CVE-2026-33349 Medium 5.9 fast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation 0.5%
• CVE-2026-33036 High 7.5 fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278) 0.6%
• CVE-2026-27942 Low 2.7 fast-xml-parser has stack overflow in XMLBuilder with preserveOrder 0.5%
• CVE-2026-25896 Critical 9.3 fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names 0.5%
• CVE-2026-26278 High 7.5 fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) 0.9%
• CVE-2026-25128 High 7.5 fast-xml-parser has RangeError DoS Numeric Entities Bug 0.6%
• CVE-2024-41818 High 7.5 ReDOS at currency parsing fast-xml-parser 0.8%
• CVE-2023-34104 High 7.5 Regex Injection via Doctype Entities 1.1%