CVE-2020-26710: Easy-Parse Project Easy-Parse

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.

Affected products

• Easy-Parse Project Easy-Parse: version 0.1.1 only

Published 2023-06-29. Last modified 2026-06-17.