WhisperX tag archive

#CDATA injection

This page collects WhisperX intelligence signals tagged #CDATA injection. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-04-28 04:54:11 · GitHub Issues

1. CVE-2026-41650: fast-xml-parser XMLBuilder Flaw Allows Comment and CDATA Injection via Unescaped Delimiters

A security vulnerability has been identified in fast-xml-parser, a widely used open-source XML parsing library maintained by NaturalIntelligence. The flaw, tracked as CVE-2026-41650 (GHSA-gh4j-gqv2-49f6), resides in the XMLBuilder component and stems from improper handling of unescaped delimiters during XML processing....

#CVE-2026-41650#XML injection#fast-xml-parser#dependency vulnerability#CDATA injection