CVE-2026-44665

fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it breaks the attribute value into multiple attributes. This gives the room for an attacker to insert unwanted attributes to the XML/HTML. This vulnerability is fixed in 1.1.7.

• CWE-91

• https://github.com/NaturalIntelligence/fast-xml-builder/security/advisories/GHSA-5wm8-gmm8-39j9
• https://github.com/NaturalIntelligence/fast-xml-builder/security/advisories/GHSA-5wm8-gmm8-39j9

Published

May 13, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4466A vulnerability has been found in Comfast CF-AC100 2.6.0.8. …4.7
• CVE-2026-44660UltraJSON is a fast JSON encoder and decoder written in pure…7.5
• CVE-2026-44661python-utcp is the python implementation of UTCP. Prior to 1…4.7
• CVE-2026-44662rust-openssl provides OpenSSL bindings for the Rust programm…5.1
• CVE-2026-44663OpenEXR is the reference implementation and specification fo…7.1
• CVE-2026-44664fast-xml-builder builds XML from JSON. In 1.1.5, the fix for…6.1
• CVE-2026-44666HRConvert2 is a self-hosted, drag-and-drop & nosql file conv…9.3
• CVE-2026-44667FACTION is a PenTesting Report Generation and Collaboration …8.7
• CVE-2026-44668FACTION is a PenTesting Report Generation and Collaboration …9.8
• CVE-2026-44669FACTION is a PenTesting Report Generation and Collaboration …8.7
• CVE-2026-4467A vulnerability was found in Comfast CF-AC100 2.6.0.8. This …4.7
• CVE-2026-44670SiYuan is an open-source personal knowledge management syste…9.4