Description
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
Remediation
References
https://gist.github.com/Sudistark/a5a45bd0804d522a1392cb5023aa7ef7
https://github.com/NaturalIntelligence/fast-xml-parser/commit/2b032a4f799c63d83991e4f992f1c68e4dd05804
https://github.com/advisories/GHSA-793h-6f7r-6qvm
Related Vulnerabilities
CVE-2020-7771 Vulnerability in npm package asciitable.js
CVE-2021-37305 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base
CVE-2022-27202 Vulnerability in maven package org.jenkins-ci.plugins:extended-choice-parameter
CVE-2022-36083 Vulnerability in npm package jose-node-esm-runtime
CVE-2023-35153 Vulnerability in maven package org.xwiki.platform:xwiki-platform-appwithinminutes-ui