Fast Xml Parser CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2024-41818

ReDOS at currency parsing fast-xml-parser

fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Naturalintelligence Redhat

Products

Fast-xml-parser Fast Xml Parser Container Native Virtualization and 1 more

CVE-2023-26920

fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Naturalintelligence

Products

Fast Xml Parser

Page 1 of 1.