https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:56:19 +0000 https://db.gcve.eu/vuln/ghsa-fj3w-jwp8-x2g3 <p><strong>Affected:</strong> npm: fast-xml-parser</p> <p>### Impact Application crashes with stack overflow when user use XML builder with `prserveOrder:true` for following or similar input</p> <p>``` [{ &#39;foo&#39;: [ { &#39;bar&#39;: [{ &#39;@_V&#39;: &#39;baz&#39; }] } ] }] ```</p> <p>Cause: `arrToStr` was not validating if the input is an array or a string and treating all non-array values as text content. _What kind of vulnerability is it? Who is impacted?_</p> <p>### Patches Yes in 5.3.8</p> <p>### Workarounds Use XML builder with `preserveOrder:false` or check the input data before passing to builder.</p> <p>### References [_Are there any links users can visit to find out more?_](https://github.com/NaturalIntelligence/fast-xml-parser/pull/791)</p> <p><strong>Affected:</strong> npm: fast-xml-parser</p> <p>### Impact Application crashes with stack overflow when user use XML builder with `prserveOrder:true` for following or similar input</p> <p>``` [{ &#39;foo&#39;: [ { &#39;bar&#39;: [{ &#39;@_V&#39;: &#39;baz&#39; }] } ] }] ```</p> <p>Cause: `arrToStr` was not validating if the input is an array or a string and treating all non-array values as text content. _What kind of vulnerability is it? Who is impacted?_</p> <p>### Patches Yes in 5.3.8</p> <p>### Workarounds Use XML builder with `preserveOrder:false` or check the input data before passing to builder.</p> <p>### References [_Are there any links users can visit to find out more?_](https://github.com/NaturalIntelligence/fast-xml-parser/pull/791)</p> https://db.gcve.eu/vuln/ghsa-fj3w-jwp8-x2g3