5-ifc-check-cli (1.0.0), 7ghost (>=4.11.2, <=4.11.46) +3946 more potentially affected by CVE-2026-26278 via fast-xml-parser (>=4.1.3, <=4.5.3)

🗓️ 17 Feb 2026 21:30:10Reported by Vulners OSVType

vulnersosv🔗 security.snyk.io👁 6 Views

fast-xml-parser 4.1.3-4.5.3 vulnerable to CVE-2026-26278 via XML parsing affecting 3934+ packages.

Reporter	Title	Published	Views	Family All 150
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile is affected by multiple security vulnerabilties	22 May 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in fast-xml-parser affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service due to vulnerabilities in Node.js dependencies	7 Apr 202616:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	24 Mar 202621:49	–	ibm
ATTACKERKB	CVE-2026-33036	20 Mar 202605:17	–	attackerkb
ATTACKERKB	CVE-2026-26278	19 Feb 202619:40	–	attackerkb
Chainguard	CVE-2026-26278 vulnerabilities	19 Feb 202613:17	–	cgr
Circl	CVE-2026-26278	14 Feb 202606:07	–	circl
CNNVD	fast-xml-parser 安全漏洞	19 Feb 202600:00	–	cnnvd

13 Mar 2026 20:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.5

EPSS0.00858

SSVC

fast-xml-parser CVE-2026-26278 XML parsing NPM package transitive dependency DoS prototype pollution