Start for Free
npm

fast-xml-parser

View on npm registry
12 Total advisories
12 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
npm

GHSA-8r6m-32jq-jx6q

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits
MEDIUM 6.5
npm

CVE-2021-26920

fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name
MEDIUM 6.1
npm

CVE-2026-41650

fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters
MEDIUM 5.9
npm

CVE-2026-33349

Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation in fast-xml-parser
HIGH 7.5
npm

CVE-2026-33036

fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)
HIGH 7.5
npm

CVE-2023-34104

fast-xml-parser vulnerable to Regex Injection via Doctype Entities
UNKNOWN
npm

CVE-2026-27942

fast-xml-parser has stack overflow in XMLBuilder with preserveOrder
HIGH 7.5
npm

CVE-2026-26278

fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)
CRITICAL 9.3
npm

CVE-2026-25896

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names
HIGH 7.5
npm

CVE-2026-25128

fast-xml-parser has RangeError DoS Numeric Entities Bug
HIGH 7.5
npm

CVE-2024-41818

fast-xml-parser vulnerable to ReDOS at currency parsing
UNKNOWN
npm

GHSA-gpv5-7x3g-ghjv

fast-xml-parser regex vulnerability patch could be improved from a safety perspective

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes