An open index of dependabot pull requests across open source projects.

fast-xml-parser

Ecosystem:
npm
Package URL:
pkg:npm/fast-xml-parser
Total PRs:
4,802 Dependabot PRs
Latest PR:
about 5 hours ago
Unique Repositories:
2,780 repositories
Unique Repos (30 days):
1,538 repositories
Security Advisories
fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)
GHSA-jmr7-xgp7-cmfj CVE-2026-26278 HIGH published about 1 month ago • updated 17 days ago
### Summary The XML parser can be forced to do an unlimited amount of entity expansion. With a very small XML input, it’s possible to make the pars...
fast-xml-parser has stack overflow in XMLBuilder with preserveOrder
GHSA-fj3w-jwp8-x2g3 CVE-2026-27942 LOW published 24 days ago • updated 18 days ago
### Impact Application crashes with stack overflow when user use XML builder with `prserveOrder:true` for following or similar input: ``` [{ '...
fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name
GHSA-x3cc-x39p-42qx CVE-2023-26920 MODERATE published almost 3 years ago • updated 14 days ago
### Impact As a part of this vulnerability, user was able to se code using `__proto__` as a tag or attribute name. ```js const { XMLParser, XMLBui...
fast-xml-parser vulnerable to Regex Injection via Doctype Entities
GHSA-6w63-h3fj-q4vw CVE-2023-34104 HIGH published almost 3 years ago • updated 14 days ago
### Impact "fast-xml-parser" allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creat...
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
GHSA-gpv5-7x3g-ghjv LOW published almost 3 years ago • updated 14 days ago
### Summary This is a comment on https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-6w63-h3fj-q4vw and the patches fix...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: fast-xml-parser
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/fast-xml-parser
JSON API: View JSON
Security Advisories

8

Active advisories
CRITICAL 1
HIGH 4
MODERATE 1
LOW 2
View All npm Advisories
Package Information
Description:

Validate XML, Parse XML, Build XML without C/C++ based libraries

Repository: https://github.com/NaturalIntelligence/fast-xml-parser
Homepage: https://github.com/NaturalIntelligence/fast-xml-parser#readme
Latest Release: 5.2.3
11 months ago
Dependent Repos: 157,710
Dependent Packages: 1,935
Downloads: 136,945,118
Ranking: Top 0.0824% by dependent repos Top 0.0233% by downloads Top 0.0402% by dependent pkgs
PR Status
Open 1,834 (38.3%)
Merged 187 (3.9%)
Closed 2,545 (53.2%)
PR Types
Removal 17 (0.4%)
Minor 1,879 (39.3%)
Major 1,159 (24.2%)
Patch 1,506 (31.5%)