6.1

CVE-2026-44664: naturalintelligence fast-xml-builder

CVSS: 6.1v3.1MediumDeferred
AliasesCGA-3xw6-r4wr-7hgcCGA-rfwc-w47h-9j7fGHSA-45c6-75p6-83cc
Published 13-05-2026Last modified 13-05-2026
Open JSON

Vulnerability summary

CVE-2026-44664 is a medium (CVSS 6.1) vulnerability in naturalintelligence fast-xml-builder. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.6% of scored vulnerabilities.

Overall risk
24/100
0100
Low · default modelHow is this calculated?
CVSS score
6.1/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.25%
0%100%
Low · +0.06 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 1
CGA-7HPM-MM6G-4846

Timeline

  1. 13-05-2026
    PublishedVulnerability first disclosed.
  2. 13-05-2026
    Last modifiedVulnerability information updated.

Description

fast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-parser sanitizes -- sequences in XML comment content using .replace(/--/g, '- -'). This skip the values containing three consecutive dashes (e.g., --->...), allowing an attacker to break out of an XML comment and inject arbitrary XML/HTML content. This vulnerability is fixed in 1.1.6.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

+0.06 pp

From 0.19% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard13 products
  • dbgate< 7.1.10-r0
  • dbgate-fips< 7.1.10-r0
  • kibana-8.17< 8.17.10-r20
  • kibana-8.17-bitnami< 8.17.10-r20
  • kibana-8.17-iamguarded< 8.17.10-r20
Naturalintelligence1 product
Npm1 product
  • fast-xml-builder≥ 1.1.5, < 1.1.6
Wolfi1 product
  • renovate< 43.170.14-r0 | < 43.170.12-r0

4 vendors · 16 products

References

5 links