@actvalue/av-aws-sdk (>=0.5.0, <=0.9.2), @adiza/sfpowerscripts (>=23.0.0, <=25.0.7) +617 more potentially affected by CVE-2023-26920 via fast-xml-parser (>=4.0.0-beta.2, <=4.1.1)

🗓️ 13 Jun 2023 12:44:34Reported by Vulners OSVType

vulnersosv🔗 github.com👁 1 Views

fast-xml-parser is affected by CVE-2023-26920.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring, IntegrationServer and IntegrationRuntime operands are vulnerable to arbitrary code execution due to [CVE-2023-26920]	28 Jun 202315:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to Prototype Pollution due to fast-xml-parser ( CVE-2023-26920 )	5 Jun 202506:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	31 Aug 202310:37	–	ibm
attackerkb	CVE-2023-26920	12 Dec 202317:15	–	attackerkb
CNNVD	fast-xml-parser security vulnerability	12 Dec 202300:00	–	cnnvd
CVE	CVE-2023-26920	12 Dec 202300:00	–	cve
Cvelist	CVE-2023-26920	12 Dec 202300:00	–	cvelist
Debian CVE	CVE-2023-26920	12 Dec 202300:00	–	debiancve
Github Security Blog	fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name	13 Jun 202312:44	–	github

14 Dec 2023 22:27Current

CVSS 3.16.5

EPSS0.01152

fast-xml-parser CVE-2023-26920