Security
فارسی
All products

fast-xml-parser

npm · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limitsCVE-2026-73569 · GHSA-8R6M-32JQ-JX6Q fast-xml-parserRed Hat OpenShift GitOps/openshift-gitops-1/argocd-rhel8 npmRed Hat High Fix reported
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped DelimitersCVE-2026-41650 · GHSA-GH4J-GQV2-49F6 fast-xml-parserCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation in fast-xml-parserCVE-2026-33349 · GHSA-JP2Q-39XQ-3W4G fast-xml-parserMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)CVE-2026-33036 · GHSA-8GC5-J5RX-235R fast-xml-parserMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat High Fix reported
fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity namesCVE-2026-25896 · GHSA-M7JM-9GC2-MPF2 fast-xml-parserMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat Critical Fix reported
fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)CVE-2026-26278 · GHSA-JMR7-XGP7-CMFJ fast-xml-parserMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat High Fix reported
fast-xml-parser has stack overflow in XMLBuilder with preserveOrderCVE-2026-27942 · GHSA-FJ3W-JWP8-X2G3 fast-xml-parserMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat Low Fix reported
fast-xml-parser has RangeError DoS Numeric Entities BugCVE-2026-25128 · GHSA-37QJ-FRW5-HHJH fast-xml-parserMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat High Fix reported
fast-xml-parser vulnerable to ReDOS at currency parsingCVE-2024-41818 · GHSA-MPG4-RC92-VX8V fast-xml-parserMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat High Fix reported
fast-xml-parser vulnerable to Regex Injection via Doctype EntitiesCVE-2023-34104 · GHSA-6W63-H3FJ-Q4VW fast-xml-parserOpenShift Serverless/org.kie.kogito-kogito-apps npmRed Hat High Fix reported
fast-xml-parser vulnerable to Prototype Pollution through tag or attribute nameCVE-2023-26920 · GHSA-X3CC-X39P-42QX fast-xml-parser npm Medium Fix reported
fast-xml-parser regex vulnerability patch could be improved from a safety perspectiveGHSA-GPV5-7X3G-GHJV fast-xml-parser npm Low Fix reported