npm/fast-xml-parser: low
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
Action: Upgrade fast-xml-parser to 4.2.5 or later.
npm i fast-xml-parser@4.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.4 | 4.2.5 | - |
Fixed versions
| 4.2.5 |
Sources
- osv: GHSA-gpv5-7x3g-ghjv
- https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-6w63-h3fj-q4vw
- https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gpv5-7x3g-ghjv
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/9a880b887916855c3a510869fd1ee268d7fe58b1
- https://github.com/NaturalIntelligence/fast-xml-parser
published · modified · JSON