Tag

xml2js

Safeguard articles tagged "xml2js" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

Choosing an npm XML Parser: Security Comparison and XXE Pitfalls

Not every npm XML parser carries the same risk. We compare xml2js, fast-xml-parser, sax, and libxmljs on their CVE history, XXE exposure, and safe configuration.

Feb 18, 20257 min read