Product by Naturalintelligence
Natural Intelligence fast-xml-parser
11 known vulnerabilities in Natural Intelligence fast-xml-parser (Naturalintelligence), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-73569 | fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits | — | |
| High | CVE-2026-26278 | fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) | 7.5 | |
| Critical | CVE-2026-25896 | fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names | 9.3 | |
| High | CVE-2023-34104 | Regex Injection via Doctype Entities | 7.5 | |
| Medium | CVE-2023-26920 | Naturalintelligence Fast XML Parser: security vulnerability | 6.5 | |
| High | CVE-2026-33036 | Natural Intelligence fast-xml-parser: XML Entity Expansion | 7.5 | |
| High | CVE-2026-25128 | fast-xml-parser has RangeError DoS Numeric Entities Bug | 7.5 | |
| High | CVE-2024-41818 | ReDOS at currency parsing fast-xml-parser | 7.5 | |
| High | CVE-2026-27942 | fast-xml-parser has stack overflow in XMLBuilder with preserveOrder | 7.5 | |
| Medium | CVE-2026-33349 | Natural Intelligence fast-xml-parser: Improper Validation of Specified Quantity in Input | 5.9 | |
| Medium | CVE-2026-41650 | fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters | 6.1 |