[Snyk] Security upgrade fast-xml-parser from 3.12.13 to 4.1.2

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-FASTXMLPARSER-3325616	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: fast-xml-parser

The new version differs by 250 commits.

• 2b032a4 Update package detail
• 7a7dbac update package for release
• b6ee2a5 update tests for #540
• 62f9e4b common logic to build text and obj node
• 83069d8 update package for release
• ed962e0 Merge branch 'dev'
• c959d13 update package detail
• 6ebcb14 make eNotation optional
• 30624d7 Fix '<' or '>' in DTD comment throwing an error. (#533)
• 40a2176 update package detail
• 45b01db add missed typing "eNotation"
• 25f5e8a Fix docs for unpairdTags example in XMLBuilder
• 007d638 update package for release
• 7ca95a2 comment unimplemented methods
• 59eb905 520 preserveorder formatting (#527)
• 08c59e2 remove space
• 6689ed2 docs: fix node project example (#522)
• 0d9d60d Fixed wrong usage in example (#518)
• a619c48 Add transformAttributeName to transform the attribute name upon parsing. Same logic as transformTagName (#519)
• f900ef8 Update README.md
• 9a8d0a7 Update README.md
• 1ff4e9a update package detail
• f719751 Update README
• f962cb5 fix: Builder tag/attributeValueProcessor types (#492)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[guardrails]

⚠️ We detected 17 security issues in this pull request:

Vulnerable Libraries (17)

Severity	Details
High	pkg:npm/[email protected]@0.0.10 (t) - no patch available
Medium	pkg:npm/[email protected]@2.5.3 (t) - no patch available
Medium	pkg:npm/[email protected]@2.99.1 (t) - no patch available
High	pkg:npm/[email protected]@4.5.3 (t) - no patch available
Medium	pkg:npm/[email protected]@7.3.0 (t) - no patch available
Critical	pkg:npm/[email protected]@4.17.15 (t) - no patch available
High	pkg:npm/[email protected]@3.0.4 (t) upgrade to: 3.0.5
High	pkg:npm/[email protected]@1.6.0 (t) - no patch available
Critical	pkg:npm/[email protected]@6.6.0 (t) - no patch available
N/A	pkg:npm/[email protected]@2.6.9 (t) upgrade to: 3.1.0
High	pkg:npm/[email protected]@0.0.8 (t) - no patch available
Medium	pkg:npm/[email protected]@6.1.3 (t) - no patch available
N/A	pkg:npm/[email protected]@0.21.1 (t) - no patch available
High	pkg:npm/[email protected]@3.0.2 (t) upgrade to: 3.0.5
Medium	pkg:npm/[email protected]@2.1.2 (t) upgrade to: 2.1.4
Critical	pkg:npm/[email protected]@3.7.2 (t) - no patch available
High	pkg:npm/[email protected]@0.5.1 (t) - no patch available

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.