{
  "@id": "urn:uuid:373ef2dd-2429-4845-bf33-44bed350f4d2",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-14T02:26:30.823104+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2023-26920 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2023-26920"
      },
      "action_statement": "Vulnerability CVE-2023-26920 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2023-34104 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2023-34104"
      },
      "action_statement": "Vulnerability CVE-2023-34104 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2024-41818 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2024-41818"
      },
      "action_statement": "Vulnerability CVE-2024-41818 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-10T21:18:37.645708+00:00",
      "status_notes": "Vulnerability CVE-2026-126066 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-126066"
      },
      "action_statement": "Vulnerability CVE-2026-126066 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-25128 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-25128"
      },
      "action_statement": "Vulnerability CVE-2026-25128 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-25896 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-25896"
      },
      "action_statement": "Vulnerability CVE-2026-25896 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-26278 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-26278"
      },
      "action_statement": "Vulnerability CVE-2026-26278 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-27942 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-27942"
      },
      "action_statement": "Vulnerability CVE-2026-27942 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-33036 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-33036"
      },
      "action_statement": "Vulnerability CVE-2026-33036 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-33349 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-33349"
      },
      "action_statement": "Vulnerability CVE-2026-33349 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-14T02:26:30.823104+00:00",
      "status_notes": "Vulnerability CVE-2026-41650 does not affect version 5.10.0 of fast-xml-parser. not_affected \u2014 The XMLBuilder in fast-xml-parser 5.10.0 is a re-export of the separate fast-xml-builder package (src/xmlbuilder/json2xml.js). The package.json and package-lock.json pin it at ^1.2.0 / 1.2.0. The upstream fix (builder update, commits 8d187f9 and f529642, both ancestors of HEAD) is already shipped in the release. The committed bundles lib/fxp.cjs, lib/fxbuilder.min.js and lib/fxp.min.js contain ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41650"
      },
      "impact_statement": "not_affected \u2014 The XMLBuilder in fast-xml-parser 5.10.0 is a re-export of the separate fast-xml-builder package (src/xmlbuilder/json2xml.js). The package.json and package-lock.json pin it at ^1.2.0 / 1.2.0. The upstream fix (builder update, commits 8d187f9 and f529642, both ancestors of HEAD) is already shipped in the release. The committed bundles lib/fxp.cjs, lib/fxbuilder.min.js and lib/fxp.min.js contain ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-73569 affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-73569"
      },
      "action_statement": "Vulnerability CVE-2026-73569 affects version 5.10.0 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.10.0",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.10.0"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability GHSA-gpv5-7x3g-ghjv affects version 5.10.0 of fast-xml-parser.",
      "vulnerability": {
        "name": "GHSA-gpv5-7x3g-ghjv"
      },
      "action_statement": "Vulnerability GHSA-gpv5-7x3g-ghjv affects version 5.10.0 of fast-xml-parser."
    }
  ]
}