WhisperX tag archive

#fast-xml-parser

This page collects WhisperX intelligence signals tagged #fast-xml-parser. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (2)

The Lab · 2026-04-23 05:54:06 · GitHub Issues

1. fast-xml-parser Patches Critical XML Injection Flaw in XMLBuilder Component

A critical security vulnerability has been identified in fast-xml-parser, a widely deployed JavaScript library for XML parsing and validation. The flaw, tracked as CVE-2026-41650 and catalogued as GHSA-gh4j-gqv2-49f6, affects the XMLBuilder component and enables XML Comment and CDATA Injection via unescaped delimiters....

The Lab · 2026-04-28 04:54:11 · GitHub Issues

2. CVE-2026-41650: fast-xml-parser XMLBuilder Flaw Allows Comment and CDATA Injection via Unescaped Delimiters

A security vulnerability has been identified in fast-xml-parser, a widely used open-source XML parsing library maintained by NaturalIntelligence. The flaw, tracked as CVE-2026-41650 (GHSA-gh4j-gqv2-49f6), resides in the XMLBuilder component and stems from improper handling of unescaped delimiters during XML processing....