Skip to content

Commit 37623f4

Browse files
yarka-guruIaroslav Pyrogov
andauthored
fix(deps): bump fast-xml-parser from 5.2.5 to 5.3.4 (#7699)
Fixes CVE-2026-25128: RangeError DoS Numeric Entities Bug in fast-xml-parser. This commit updates fast-xml-parser to version 5.3.4 which contains the fix for the high severity vulnerability affecting versions 4.3.6 - 5.3.3. Updated packages: - packages-internal/xml-builder - private/aws-protocoltests-restxml - private/aws-protocoltests-restxml-schema See: GHSA-37qj-frw5-hhjh Co-authored-by: Iaroslav Pyrogov <ipyrogov@tln.care>
1 parent db453d3 commit 37623f4

File tree

4 files changed

+10
-10
lines changed

4 files changed

+10
-10
lines changed

packages-internal/xml-builder/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
"description": "XML builder for the AWS SDK",
55
"dependencies": {
66
"@smithy/types": "^4.12.0",
7-
"fast-xml-parser": "5.2.5",
7+
"fast-xml-parser": "5.3.4",
88
"tslib": "^2.6.2"
99
},
1010
"scripts": {

private/aws-protocoltests-restxml-schema/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@
6060
"@smithy/util-stream": "^4.5.10",
6161
"@smithy/util-utf8": "^4.2.0",
6262
"entities": "2.2.0",
63-
"fast-xml-parser": "5.2.5",
63+
"fast-xml-parser": "5.3.4",
6464
"tslib": "^2.6.2"
6565
},
6666
"devDependencies": {

private/aws-protocoltests-restxml/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@
6262
"@smithy/util-utf8": "^4.2.0",
6363
"@smithy/uuid": "^1.1.0",
6464
"entities": "2.2.0",
65-
"fast-xml-parser": "5.2.5",
65+
"fast-xml-parser": "5.3.4",
6666
"tslib": "^2.6.2"
6767
},
6868
"devDependencies": {

yarn.lock

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1168,7 +1168,7 @@ __metadata:
11681168
concurrently: "npm:7.0.0"
11691169
downlevel-dts: "npm:0.10.1"
11701170
entities: "npm:2.2.0"
1171-
fast-xml-parser: "npm:5.2.5"
1171+
fast-xml-parser: "npm:5.3.4"
11721172
premove: "npm:4.0.0"
11731173
tslib: "npm:^2.6.2"
11741174
typescript: "npm:~5.8.3"
@@ -1228,7 +1228,7 @@ __metadata:
12281228
concurrently: "npm:7.0.0"
12291229
downlevel-dts: "npm:0.10.1"
12301230
entities: "npm:2.2.0"
1231-
fast-xml-parser: "npm:5.2.5"
1231+
fast-xml-parser: "npm:5.3.4"
12321232
premove: "npm:4.0.0"
12331233
tslib: "npm:^2.6.2"
12341234
typescript: "npm:~5.8.3"
@@ -24912,7 +24912,7 @@ __metadata:
2491224912
"@tsconfig/recommended": "npm:1.0.1"
2491324913
concurrently: "npm:7.0.0"
2491424914
downlevel-dts: "npm:0.10.1"
24915-
fast-xml-parser: "npm:5.2.5"
24915+
fast-xml-parser: "npm:5.3.4"
2491624916
premove: "npm:4.0.0"
2491724917
tslib: "npm:^2.6.2"
2491824918
typescript: "npm:~5.8.3"
@@ -33901,14 +33901,14 @@ __metadata:
3390133901
languageName: node
3390233902
linkType: hard
3390333903

33904-
"fast-xml-parser@npm:5.2.5":
33905-
version: 5.2.5
33906-
resolution: "fast-xml-parser@npm:5.2.5"
33904+
"fast-xml-parser@npm:5.3.4":
33905+
version: 5.3.4
33906+
resolution: "fast-xml-parser@npm:5.3.4"
3390733907
dependencies:
3390833908
strnum: "npm:^2.1.0"
3390933909
bin:
3391033910
fxparser: src/cli/cli.js
33911-
checksum: 10c0/d1057d2e790c327ccfc42b872b91786a4912a152d44f9507bf053f800102dfb07ece3da0a86b33ff6a0caa5a5cad86da3326744f6ae5efb0c6c571d754fe48cd
33911+
checksum: 10c0/d77866ca860ad185153e12f6ba12274d32026319ad8064e4681342b8a8e1ffad3f1f98daf04d77239fb12eb1d906ee7185fd328deda74529680e8dae0f3e9327
3391233912
languageName: node
3391333913
linkType: hard
3391433914

0 commit comments

Comments
 (0)