Vulnerability in shepherd project

[ankitdn]

While working on shepherd project, I found that fast-xml-parser throws an uncaught RangeError when parsing XML containing out-of-range numeric entities. The error occurs due to the use of String.fromCodePoint() with invalid Unicode values, causing the application to crash and result in a Denial of Service (DoS) when untrusted XML input is processed.

CVE Report
CVE Link

[RobbieTheWagner]

@ankitdn do you mean the latest shepherd version on npm or what were you using?