Stack Overflow

🗓️ 04 Mar 2026 08:04:19Reported by Veracode Vulnerability DatabaseType

fast-xml-parser has a stack overflow in the XML builder when preserveOrder is true, risking crash from crafted input.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile is affected by multiple security vulnerabilties	22 May 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in fast-xml-parser affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:11	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service due to vulnerabilities in Node.js dependencies	7 Apr 202616:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	24 Mar 202621:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to node module fast-xml-parser	22 May 202608:32	–	ibm
ATTACKERKB	CVE-2026-27942	26 Feb 202601:22	–	attackerkb
Chainguard	CVE-2026-27942 vulnerabilities	27 Feb 202619:17	–	cgr
Circl	CVE-2026-27942	27 Feb 202603:40	–	circl

Vulners

Node

Source	Link
github	www.github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a
github	www.github.com/NaturalIntelligence/fast-xml-parser/pull/791
github	www.github.com/advisories/GHSA-fj3w-jwp8-x2g3
github	www.github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3

23 Jun 2026 18:39Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

CVSS 46.9

EPSS0.00478

SSVC