WhisperX tag archive

#CVE-GHSA

This page collects WhisperX intelligence signals tagged #CVE-GHSA. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-04-23 02:54:08 · GitHub Issues

1. fast-xml-parser XML Injection Flaw Penetrates Firebase Admin Through Transitive Dependency Chain

A medium-severity XML injection vulnerability in `fast-xml-parser` versions below 5.7.0 has been identified as reachable through a transitive dependency chain affecting `firebase-admin` deployments. The flaw, cataloged as GHSA-gh4j-gqv2-49f6 with a CVSS score of 6.1, allows attackers to inject malformed XML structures ...

#xml-injection#transitive-dependency#firebase-admin#npm-vulnerability#CVE-GHSA