Skip to content
Threat Feed
Subscribe

Product

Fast-Xml-Parser (>= 5.9.3, < 5.10.1)

1 brief RSS
medium advisory

fast-xml-parser: Repeated DOCTYPE Declarations Bypass Entity Expansion Limits Leading to DoS

A vulnerability in fast-xml-parser allows an attacker to bypass entity expansion limits by crafting XML documents with multiple DOCTYPE declarations, leading to excessive CPU usage, memory exhaustion, and denial of service.

fast-xml-parser denial-of-service vulnerability-exploitation software-supply-chain
1t