CVE-2023-26920

Publication date 12 December 2023

Last updated 25 March 2026

Ubuntu priority

Cvss 3 Severity Score

fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.

Show unmaintained releases

Package	Ubuntu Release	Status
node-webfont	26.04 LTS resolute	Needs evaluation
	25.10 questing	Ignored end of life, was needs-triage
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Not in release

CVSS version: CVSS v3.0

Base score 6.5 · Medium

Base metrics

Scores

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N