ROOT-APP-NPM-CVE-2026-25128 CVE-2026-25128 in @rootio/fast-xml-parser - Patched by Root

Root has patched CVE-2026-25128 in the @rootio/fast-xml-parser package for Root:npm. Multiple fixed versions available...

CVE-2026-25128 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, saf, tileserver-gl, opensearch-dashboards, renovate, langfuse, prism, kubeflow-pipelines...

CVE-2026-25128

creationtimestamp| type| source ---|---|--- 2026-01-30 04:24:32+00:00| published-proof-of-concept| https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh 2026-01-30 16:17:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpb334mg24...