fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters
Moderate severity
GitHub Reviewed
Published
Apr 18, 2026
in
NaturalIntelligence/fast-xml-parser
•
Updated May 8, 2026
Give feedback on Dependabot alerts