Description
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
Remediation
References
https://gist.github.com/Sudistark/a5a45bd0804d522a1392cb5023aa7ef7
https://github.com/advisories/GHSA-793h-6f7r-6qvm
https://github.com/NaturalIntelligence/fast-xml-parser/commit/2b032a4f799c63d83991e4f992f1c68e4dd05804
Related Vulnerabilities
CVE-2021-27582 Vulnerability in maven package org.mitre:openid-connect-server
CVE-2019-10806 Vulnerability in maven package org.webjars.npm:vega-util
CVE-2017-18349 Vulnerability in maven package com.alibaba:fastjson
CVE-2021-26539 Vulnerability in maven package org.webjars.npm:sanitize-html
CVE-2018-16479 Vulnerability in npm package http-live-simulator