Description
No description available.
Recommendation
Update the fast-xml-parser package to the latest compatible version. Followings are version details:
- Affected version(s): < 5.7.0
- Patched version(s): 5.7.0
References
Could your website be exposed too?
SmartScanner can check your website for fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters and gives you actionable findings to investigate.
Start a free scanRelated Issues
- fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names - CVE-2026-25896
- fast-xml-parser vulnerable to Regex Injection via Doctype Entities - CVE-2023-34104
- fast-xml-parser has stack overflow in XMLBuilder with preserveOrder - CVE-2026-27942
- SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize() - CVE-2026-33418
You might also like:
See something that needs correcting? Let us knowUpdated May 08, 2026