CVE-2026-126066

A flaw was found in fast-xml-parser. When the stopNodes configuration option is enabled, the parser repeatedly rescans remaining input when encountering unterminated tag fragments. A remote attacker could exploit this vulnerability by supplying specially crafted XML input containing numerous...