CVE-2023-26920
CVE-2023-26920
This page contains facts from public vulnerability sources. Check the original advisory before updating.
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
CVSS 6.5 · Medium · EPSS 1.2%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
node-webfont Debian:12
- Versions
- 11.4.0+dfsg2+~cs35.7.26-10
- 11.4.0+dfsg2+~cs35.7.26-11
- 11.4.0+dfsg2+~cs35.7.26-12
- 11.4.0+dfsg2+~cs35.7.26-13
- 11.4.0+dfsg2+~cs35.7.26-14
- 11.4.0+dfsg2+~cs35.7.26-15
- 11.4.0+dfsg2+~cs35.7.26-16
- 11.4.0+dfsg2+~cs35.7.26-18
- 11.4.0+dfsg2+~cs35.7.26-19
- 11.4.0+dfsg2+~cs35.7.26-20
- 11.4.0+dfsg2+~cs35.7.26-21
- 11.4.0+dfsg2+~cs35.7.26-22
- 11.4.0+dfsg2+~cs35.7.26-7
- 11.4.0+dfsg2+~cs35.7.26-8
- 11.4.0+dfsg2+~cs35.7.26-9
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-webfont Debian:13
- Versions
- 11.4.0+dfsg2+~cs35.7.26-13
- 11.4.0+dfsg2+~cs35.7.26-14
- 11.4.0+dfsg2+~cs35.7.26-15
- 11.4.0+dfsg2+~cs35.7.26-16
- 11.4.0+dfsg2+~cs35.7.26-18
- 11.4.0+dfsg2+~cs35.7.26-19
- 11.4.0+dfsg2+~cs35.7.26-20
- 11.4.0+dfsg2+~cs35.7.26-21
- 11.4.0+dfsg2+~cs35.7.26-22
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-webfont Debian:14
- Versions
- 11.4.0+dfsg2+~cs35.7.26-13
- 11.4.0+dfsg2+~cs35.7.26-14
- 11.4.0+dfsg2+~cs35.7.26-15
- 11.4.0+dfsg2+~cs35.7.26-16
- 11.4.0+dfsg2+~cs35.7.26-18
- 11.4.0+dfsg2+~cs35.7.26-19
- 11.4.0+dfsg2+~cs35.7.26-20
- 11.4.0+dfsg2+~cs35.7.26-21
- 11.4.0+dfsg2+~cs35.7.26-22
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-webfont Ubuntu:24.04:LTS
- Versions
- 11.4.0+dfsg2+~cs35.7.26-7ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-webfont Ubuntu:25.10
- Versions
- 11.4.0+dfsg2+~cs35.7.26-10
- 11.4.0+dfsg2+~cs35.7.26-13ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-webfont Ubuntu:26.10
- Versions
- 11.4.0+dfsg2+~cs35.7.26-18
- 11.4.0+dfsg2+~cs35.7.26-19
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-webfont Ubuntu:26.04:LTS
- Versions
- 11.4.0+dfsg2+~cs35.7.26-13ubuntu2
- 11.4.0+dfsg2+~cs35.7.26-14
- 11.4.0+dfsg2+~cs35.7.26-15
- 11.4.0+dfsg2+~cs35.7.26-16build1
- 11.4.0+dfsg2+~cs35.7.26-18
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published