Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
NaturalIntelligence records in CISA KEVNo NaturalIntelligence vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 79
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00527 · Published 2026-02-20 · Partial fix · 5.3.5, 4.5.4 CWE-185
Priority HIGH 72
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-03-20 · Partial fix · 5.5.6, 4.5.5 CWE-776
Priority HIGH 72
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-01-30 · Partial fix · 5.3.4 CWE-20
Priority MEDIUM 60
fast-xml-builder builds XML from JSON.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00236 · Published 2026-05-13 · Partial fix · 1.1.7 CWE-91
Priority MEDIUM 60
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00238 · Published 2026-05-07 · Partial fix · 5.7.0 CWE-91
Priority MEDIUM 60
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-03-24 · Partial fix · 5.5.7, 4.5.5 CWE-1284
Priority MEDIUM 44
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-08-13 · Partial fix · 5.10.1 CWE-776
Priority MEDIUM 41
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00937 · Published 2026-02-19 · Partial fix · 5.3.6, 4.5.4 CWE-776
Priority MEDIUM 40
fast-xml-parser is an open source, pure javascript xml parser.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00828 · Published 2024-07-29 · Partial fix · 4.4.1 CWE-400
Priority LOW 35
fast-xml-parser is an open source, pure javascript xml parser.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01126 · Published 2023-06-06 · Partial fix · 4.2.4 CWE-1333
Priority LOW 31
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01152 · Published 2023-12-12 · Fixed in 4.1.2 CWE-1321
Priority LOW 27
fast-xml-builder builds XML from JSON.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00194 · Published 2026-05-13 · Partial fix · 1.1.6 CWE-91
Priority LOW 14
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00543 · Published 2026-02-26 · Partial fix · 5.3.8, 4.5.4 CWE-120
THREATIST.IORead the docs