Priority MEDIUM 44
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-08-13 · Partial fix · 5.10.1 CWE-776
Priority LOW 27
fast-xml-builder builds XML from JSON.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00194 · Published 2026-05-13 · Partial fix · 1.1.6 CWE-91
Priority MEDIUM 60
fast-xml-builder builds XML from JSON.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00236 · Published 2026-05-13 · Partial fix · 1.1.7 CWE-91
Priority MEDIUM 60
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00238 · Published 2026-05-07 · Partial fix · 5.7.0 CWE-91
Priority MEDIUM 60
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-03-24 · Partial fix · 5.5.7, 4.5.5 CWE-1284
Priority HIGH 72
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-03-20 · Partial fix · 5.5.6, 4.5.5 CWE-776
Priority LOW 14
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00543 · Published 2026-02-26 · Partial fix · 5.3.8, 4.5.4 CWE-120
Priority HIGH 79
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00527 · Published 2026-02-20 · Partial fix · 5.3.5, 4.5.4 CWE-185
Priority MEDIUM 41
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00937 · Published 2026-02-19 · Partial fix · 5.3.6, 4.5.4 CWE-776
Priority HIGH 72
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-01-30 · Partial fix · 5.3.4 CWE-20
Priority MEDIUM 40
fast-xml-parser is an open source, pure javascript xml parser.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00828 · Published 2024-07-29 · Partial fix · 4.4.1 CWE-400
Priority LOW 31
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01152 · Published 2023-12-12 · Fixed in 4.1.2 CWE-1321
Priority LOW 35
fast-xml-parser is an open source, pure javascript xml parser.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01126 · Published 2023-06-06 · Partial fix · 4.2.4 CWE-1333
THREATIST.IORead the docs