VULN UPGRADE: patch: fast-xml-parser, form-data [packages/plugin-junit]

[campaigner-prod]

Summary: Security update — 2 packages upgraded (patch changes only)

Manifests changed:

• packages/plugin-junit (npm)

Updates

Package	From	To	Type	Vulnerabilities Fixed
fast-xml-parser	5.3.7	5.3.9	patch	2 LOW
form-data	4.0.4	4.0.5	patch	-

Packages marked with "-" are updated due to dependency constraints.

---

Security Details

ℹ️ Other Vulnerabilities (2)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
fast-xml-parser	GHSA-fj3w-jwp8-x2g3	LOW	fast-xml-parser has stack overflow in XMLBuilder with preserveOrder	5.3.7	5.3.8
fast-xml-parser	CVE-2026-27942	LOW	fast-xml-parser has stack overflow in XMLBuilder with preserveOrder	5.3.7	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI

---

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System