PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
fast-xml-parser fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags Low Risk 3.7 12 hours ago 11 hours ago
fast-xml-parser fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits High Risk 8.0 3 months ago 2 months ago
fast-xml-parser fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters Medium Risk 6.1 6 months ago 2 months ago
fast-xml-parser Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation in fast-xml-parser Medium Risk 5.9 7 months ago 2 months ago
fast-xml-parser fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278) High Risk 7.5 7 months ago 2 months ago
fast-xml-parser fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) High Risk 7.5 8 months ago 2 months ago
fast-xml-parser fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names Critical 9.3 8 months ago 2 months ago
fast-xml-parser fast-xml-parser has stack overflow in XMLBuilder with preserveOrder Low Risk 3.0 8 months ago 2 months ago
fast-xml-parser fast-xml-parser has RangeError DoS Numeric Entities Bug High Risk 7.5 9 months ago 2 months ago
fast-xml-parser fast-xml-parser vulnerable to ReDOS at currency parsing High Risk 7.5 2 years ago 2 months ago
fast-xml-parser fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name Medium Risk 6.5 3 years ago 4 months ago
fast-xml-parser fast-xml-parser vulnerable to Regex Injection via Doctype Entities High Risk 7.5 3 years ago 8 months ago
fast-xml-parser fast-xml-parser regex vulnerability patch could be improved from a safety perspective Low Risk 3.0 3 years ago 3 years ago
Data courtesy of OSV.dev
Page 1