| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-73569 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to process XML from JS object without C/C ... |
| CVE-2026-41650 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to process XML from JS object without C/C ... |
| CVE-2026-33349 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to process XML from JS object without C/C ... |
| CVE-2026-33036 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to process XML from JS object without C/C ... |
| CVE-2026-27942 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to validate XML, parse XML to JS object, ... |
| CVE-2026-26278 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to validate XML, parse XML to JS object, ... |
| CVE-2026-25896 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser allows users to validate XML, parse XML to JS object, ... |
| CVE-2023-26920 | vulnerable | vulnerable | vulnerable | vulnerable | fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution. |