Known vulnerabilities in fast-xml-parser

Software CPE: cpe:2.3:a:natural_intelligence:fast-xml-parser:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting fast-xml-parser fast-xml-parser is affected by 10 known vulnerabilities: 9 medium, 1 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126617 - XML Injection
CVE-2026-41650
CWE-91 Medium
No
No
5.7.0 20.04.2026 SB20260420118
#VU126616 - Improper Validation of Specified Quantity in Input
CVE-2026-33349
CWE-1284 Medium
No
No
4.5.5, 5.5.7 20.04.2026 SB20260420117
SB2026052512
SB2026052624
#VU126615 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2026-33036
CWE-776 Medium
No
No
4.5.5, 5.5.6 20.04.2026 SB20260420117
SB2026052512
SB2026052624
and 2 more
#VU126614 - Improper input validation
CVE-2026-27942
CWE-20 Low
No
No
4.5.4, 5.3.7 20.04.2026 SB20260420116
SB2026052512
SB2026052624
and 2 more
#VU123128 - Incorrect Regular Expression
CVE-2026-25896
CWE-185 Medium
Available
No
5.3.5 23.02.2026 SB2026022328
SB2026031935
SB2026040116
and 5 more
#VU123126 - NULL Pointer Dereference
CVE-2026-26278
CWE-476 Medium
Available
No
5.3.6 23.02.2026 SB2026022326
SB2026031935
SB2026040225
and 4 more
#VU122150 - Uncaught Exception
CVE-2026-25128
CWE-248 Medium
Available
No
5.3.4 30.01.2026 SB2026013034
SB2026030312
SB2026030633
and 7 more
#VU97478 - Inefficient Regular Expression Complexity
CVE-2024-41818
CWE-1333 Medium
No
No
4.4.1 18.09.2024 SB2024091833
SB2024091834
SB2024092612
and 12 more
#VU80772 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26920
CWE-1321 Medium
No
No
4.1.2 14.09.2023 SB2023091411
SB2023091828
SB2024030742
and 2 more
#VU78981 - Inefficient Regular Expression Complexity
CVE-2023-34104
CWE-1333 Medium
No
No
4.2.4 07.08.2023 SB2023080707
SB2023081408
SB2023091122
and 6 more