CVE-2026-44664
1 advisory.
npm/fast-xml-builder CVE-2026-44664: medium 6.1
fast-xml-builder Comment Value regex can be bypassed
Action: Upgrade fast-xml-builder to 1.1.6 or later.
npm i fast-xml-builder@1.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.5 | 1.1.6 | - |
Fixed versions
| 1.1.6 |
Sources
- osv: GHSA-45c6-75p6-83cc
- https://github.com/NaturalIntelligence/fast-xml-builder/security/advisories/GHSA-45c6-75p6-83cc
- https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gh4j-gqv2-49f6
- https://nvd.nist.gov/vuln/detail/CVE-2026-44664
- https://github.com/NaturalIntelligence/fast-xml-builder
CVE-2026-44664 · published · modified · JSON