CVE-2023-26920: Naturalintelligence Fast XML Parser

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.

Affected products

• Naturalintelligence Fast XML Parser: before 4.1.2 (fixed in 4.1.2)

Published 2023-12-12. Last modified 2026-06-17.