{
  "@id": "urn:uuid:3158c64b-df5c-4acd-8cc0-344e1c9403c0",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-14T18:13:57.428392+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2023-26920 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2023-26920"
      },
      "action_statement": "Vulnerability CVE-2023-26920 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2023-34104 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2023-34104"
      },
      "action_statement": "Vulnerability CVE-2023-34104 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2024-41818 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2024-41818"
      },
      "action_statement": "Vulnerability CVE-2024-41818 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-14T18:13:57.428392+00:00",
      "status_notes": "Vulnerability CVE-2026-126066 affects version 5.7.3 of fast-xml-parser, and is fixed in 5.7.3-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-126066"
      },
      "action_statement": "Vulnerability CVE-2026-126066 affects version 5.7.3 of fast-xml-parser, and is fixed in 5.7.3-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-25128 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-25128"
      },
      "action_statement": "Vulnerability CVE-2026-25128 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-25896 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-25896"
      },
      "action_statement": "Vulnerability CVE-2026-25896 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-26278 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-26278"
      },
      "action_statement": "Vulnerability CVE-2026-26278 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-27942 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-27942"
      },
      "action_statement": "Vulnerability CVE-2026-27942 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-33036 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-33036"
      },
      "action_statement": "Vulnerability CVE-2026-33036 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-33349 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-33349"
      },
      "action_statement": "Vulnerability CVE-2026-33349 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-13T19:37:00.500321+00:00",
      "status_notes": "Vulnerability CVE-2026-41650 does not affect version 5.7.3 of fast-xml-parser. not_affected \u2014 fast-xml-parser 5.7.3 is not affected by CVE-2026-41650. The XMLBuilder is the separate fast-xml-builder package, pinned at ^1.1.7 (lockfiles resolve to 1.1.7). The shipped bundles (lib/fxp.cjs, lib/fxp.min.js, lib/fxbuilder.min.js) already contain the upstream fix, which splits ']]>' in CDATA and rewrites '--' in comments. The upstream commits f529642 and 8d187f9 are ancestors of HEAD. The rep...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41650"
      },
      "impact_statement": "not_affected \u2014 fast-xml-parser 5.7.3 is not affected by CVE-2026-41650. The XMLBuilder is the separate fast-xml-builder package, pinned at ^1.1.7 (lockfiles resolve to 1.1.7). The shipped bundles (lib/fxp.cjs, lib/fxp.min.js, lib/fxbuilder.min.js) already contain the upstream fix, which splits ']]>' in CDATA and rewrites '--' in comments. The upstream commits f529642 and 8d187f9 are ancestors of HEAD. The rep..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability CVE-2026-73569 affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "CVE-2026-73569"
      },
      "action_statement": "Vulnerability CVE-2026-73569 affects version 5.7.3 of fast-xml-parser."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/fast-xml-parser@5.7.3",
          "identifiers": {
            "purl": "pkg:npm/fast-xml-parser@5.7.3"
          }
        }
      ],
      "timestamp": "2026-11-03T13:12:13.552310+00:00",
      "status_notes": "Vulnerability GHSA-gpv5-7x3g-ghjv affects version 5.7.3 of fast-xml-parser.",
      "vulnerability": {
        "name": "GHSA-gpv5-7x3g-ghjv"
      },
      "action_statement": "Vulnerability GHSA-gpv5-7x3g-ghjv affects version 5.7.3 of fast-xml-parser."
    }
  ]
}