Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

fast-xml-parser

Fast pure JS implementation of XML parser
Collective - Host: opensource - https://opencollective.com/fast-xml-parser - Code: https://github.com/NaturalIntelligence/fast-xml-parser

High

fast-xml-parser: GSA_kwCzR0hTQS1tcGc0LXJjOTItdng4ds4AA-Mb

fast-xml-parser vulnerable to ReDOS at currency parsing
Ecosystems: npm
Packages: fast-xml-parser
Source: github
Published: 5 months ago

Low

fast-xml-parser: GSA_kwCzR0hTQS1ncHY1LTd4M2ctZ2hqds4AAz4I

fast-xml-parser regex vulnerability patch could be improved from a safety perspective
Ecosystems: npm
Packages: fast-xml-parser
Source: github
Published: over 1 year ago

Moderate

fast-xml-parser: GSA_kwCzR0hTQS14M2NjLXgzOXAtNDJxeM4AAzz_

fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name
Ecosystems: npm
Packages: fast-xml-parser
Source: github
Published: over 1 year ago

High

fast-xml-parser: GSA_kwCzR0hTQS02dzYzLWgzZmotcTR2d84AAzr7

fast-xml-parser vulnerable to Regex Injection via Doctype Entities
Ecosystems: npm
Packages: fast-xml-parser
Source: github
Published: over 1 year ago