ROOT-APP-NPM-CVE-2026-25896 CVE-2026-25896 in @rootio/fast-xml-parser - Patched by Root

🗓️ 30 Jun 2026 07:39:47Reported by GoogleType

osv

osv🔗 osv.dev👁 10 Views

Root patches CVE-2026-25896 in @rootio/fast-xml-parser; multiple fixed versions available.

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile is affected by multiple security vulnerabilties	22 May 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in node-tar affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Aspera Enterprise WebApps	29 May 202618:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to cross-site scripting (CVE-2026-25896)	31 Mar 202615:10	–	ibm
ATTACKERKB	CVE-2026-25896	20 Feb 202620:57	–	attackerkb
Chainguard	CVE-2026-25896 vulnerabilities	24 Feb 202601:17	–	cgr
Circl	CVE-2026-25896	20 Feb 202604:36	–	circl
CNNVD	fast-xml-parser 安全漏洞	20 Feb 202600:00	–	cnnvd
CVE	CVE-2026-25896	20 Feb 202620:57	–	cve

30 Jun 2026 13:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.19.3

EPSS0.00445

cve 2026 25896 rootio fast-xml-parser node package manager patch applied fixed versions library