Cloudanix VulnDB

GHSA-fj3w-jwp8-x2g3

None

CVSS

—

EPSS

—

Published

Feb 26, 2026

CISA due date

—

The record

fast-xml-parser has stack overflow in XMLBuilder with preserveOrder

Affected packages

Ecosystem Package Introduced Fixed
npm fast-xml-parser 4.0.0-beta.0 4.5.4
npm fast-xml-parser 5.0.0 5.3.8
Chainguard dbgate 0 7.1.2-r1
Chainguard dbgate-fips 0 7.1.2-r0
Chainguard jitsucom-jitsu-console 0 2.11.0-r16
Chainguard kibana-8.17 0 8.17.10-r11
Chainguard kibana-8.17-iamguarded 0 8.17.10-r11
Chainguard kibana-8.19 0 8.19.12-r3
Chainguard kibana-8.19-bitnami 0 8.19.12-r3
Chainguard kibana-8.19-iamguarded 0 8.19.12-r3
Chainguard kibana-9.0 0 9.0.8-r11
Chainguard kibana-9.0-iamguarded 0 9.0.8-r11
Chainguard kibana-9.1 0 9.1.10-r6
Chainguard kibana-9.1-iamguarded 0 9.1.10-r6
Chainguard kibana-9.2 0 9.2.6-r2
Chainguard kibana-9.2-iamguarded 0 9.2.6-r2
Chainguard kibana-9.3 0 9.3.1-r1
Chainguard kibana-9.3-iamguarded 0 9.3.1-r1
Chainguard kubeflow-pipelines-frontend 0 2.16.0-r2
Chainguard langfuse-2-worker 0 2.95.12-r12
Chainguard librechat 0 0.8.2-r6
Chainguard opensearch-dashboards-3 0 3.5.0-r3
Chainguard opensearch-dashboards-3-fips 0 3.5.0-r2
Chainguard prism 0 5.14.3-r8
Chainguard renovate 0 43.48.3-r0
Chainguard tileserver-gl 0 5.5.0-r6
Chainguard tileserver-gl-fips 0 5.5.0-r7
Wolfi jitsucom-jitsu-console 0 2.11.0-r16
Wolfi kubeflow-pipelines-frontend 0 2.16.0-r2
Wolfi opensearch-dashboards-3 0 3.5.0-r3
Wolfi prism 0 5.14.3-r8
Wolfi renovate 0 43.48.3-r0
Wolfi tileserver-gl 0 5.5.0-r6

Related vulnerabilities