NA
Vendor
NaturalIntelligence
13
CVEs
0
On KEV
0
New 30D
Products
FA9.3
fast-xml-parser
NaturalIntelligence
11 CVEs0 on KEV0 new
FA6.1
fast-xml-builder
NaturalIntelligence
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-73569 | FA fast-xml-parser NaturalIntelligence | 8.7 | Aug 13 | fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits |
| CVE-2026-44664 | FA fast-xml-builder NaturalIntelligence | 6.1 | May 13 | fast-xml-builder: Comment Value bypass regex |
| CVE-2026-44665 | FA fast-xml-builder NaturalIntelligence | 6.1 | May 13 | fast-xml-builder: Attribute values with unwanted quotes can bypass malicious or unwanted attributes |
| CVE-2026-41650 | FA fast-xml-parser NaturalIntelligence | 6.1 | May 7 | fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters |
| CVE-2026-33349 | FA fast-xml-parser NaturalIntelligence | 5.9 | Mar 24 | fast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation |
| CVE-2026-33036 | FA fast-xml-parser NaturalIntelligence | 7.5 | Mar 20 | fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278) |
| CVE-2026-27942 | FA fast-xml-parser NaturalIntelligence | 7.5 | Feb 26 | fast-xml-parser has stack overflow in XMLBuilder with preserveOrder |
| CVE-2026-25896 | FA fast-xml-parser NaturalIntelligence | 9.3 | Feb 20 | fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names |
| CVE-2026-26278 | FA fast-xml-parser NaturalIntelligence | 7.5 | Feb 19 | fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) |
| CVE-2026-25128 | FA fast-xml-parser NaturalIntelligence | 7.5 | Jan 30 | fast-xml-parser has RangeError DoS Numeric Entities Bug |
| CVE-2024-41818 | FA Fast-xml-parser Naturalintelligence | 7.5 | Jul 29 | fast-xml-parser is an open source, pure javascript xml parser |
| CVE-2023-26920 | FX Fast Xml Parser Naturalintelligence | 6.5 | Dec 12 | fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution |
| CVE-2023-34104 | FA Fast-xml-parser Naturalintelligence | 7.5 | Jun 6 | fast-xml-parser is an open source, pure javascript xml parser |