CVE-2026-73569

High

Advisory

Published 21 Jul 2026In the index since 8 Sept 2026

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
fast-xml-parsernpm	5.9.3	5.10.1	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2026-73569.

Container image	Digest	Package	Fixed in
ghcr.io/mkutlak/alluredeck-api :0.41.0	fa429df90c68	fast-xml-parser@5.9.3	5.10.1

1,273

devportalveecode-platform-next

1 of the 1 container images this version deploys carry CVE-2026-73569.

Container image	Digest	Package	Fixed in
veecode/devportaldigest-pinned	c443520aebf7	fast-xml-parser@5.9.3	5.10.1

1,787

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
veecode/devportal	c443520aebf7	fast-xml-parser@5.9.3	5.10.1	1
ghcr.io/mkutlak/alluredeck-api :0.41.0	fa429df90c68	fast-xml-parser@5.9.3	5.10.1	1