Skip to content

npm shows vulnerabilities with dep fast-xml-parser #48

@sebki

Description

@sebki

Output npm audit:

npm audit report

fast-xml-parser <=4.2.3
Severity: high
fast-xml-parser vulnerable to Regex Injection via Doctype Entities - GHSA-6w63-h3fj-q4vw
fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name - GHSA-x3cc-x39p-42qx
No fix available
node_modules/fast-xml-parser
boardgamegeekclient *
Depends on vulnerable versions of fast-xml-parser
node_modules/boardgamegeekclient

2 high severity vulnerabilities

Maybe not as important for most usecases, just thought you should know and I think they fixed the issue with a newer release so changing the version should fix the warning.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions