Is fast-xml-parser 5.10 vulnerable?
npm · 2 releases from 5.10.0 to 5.10.1 · latest fast-xml-parser is 5.11.2 · checked 1 Nov 2026
No known advisories in the last release
fast-xml-parser 5.10.1, the last 5.10 release, has no known advisories. 1 advisory affects earlier 5.10.x releases, so update to 5.10.1.
Update within 5.10:
npm install fast-xml-parser@5.10.1Fixed within 5.10.x, affecting earlier releases
fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits
- Affected
- >=5.9.3 <5.10.1
- Fixed in
- 5.10.1
Which of your client projects are still on fast-xml-parser 5.10?
NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact fast-xml-parser version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.
Other fast-xml-parser versions
Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the npm registry. Refreshed daily.