Skip to main content

Vendor/product archive

naturalintelligence / fast-xml-parser CVEs

Beta · best-effort

9 CVEs tagged to naturalintelligence / fast-xml-parser1 Critical, 5 High, 2 Medium, 1 Low, 0 Unrated.

CVE-2026-41650

Published May 7, 2026

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the "-->" sequence in com…

CVSS 6.1 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-33349

Published Mar 24, 2026

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From version 4.0.0-beta.3 to before version 5.5.7, the DocTypeReader in fast…

CVSS 5.9 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-33036

Published Mar 20, 2026

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Versions 4.0.0-beta.3 through 5.5.5 contain a bypass vulnerability where num…

CVSS 7.5 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort

CVE-2026-27942

Published Feb 26, 2026

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. Prior to version 5.3.8, the applic…

CVSS 2.7 · Low
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort

CVE-2026-25896

Published Feb 20, 2026

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (…

CVSS 9.3 · Critical
evidence mentions
14
Buzz score
40.1
Vendor/product tagsBeta · best-effort

CVE-2026-26278

Published Feb 19, 2026

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, t…

CVSS 7.5 · High
evidence mentions
13
Buzz score
39.4
Vendor/product tagsBeta · best-effort

CVE-2026-25128

Published Jan 30, 2026

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 5.0.9 through 5.3.3, a…

CVSS 7.5 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort
Showing 1-9 of 9 CVEsPage 1 of 1