fast-xml-parser vulnerability - CVE-2026-26278

Author: nhsd-david-wass

package-lock.json

@@ -53,13 +53,12 @@
   "name": "nhs-notify-supplier-api",
   "overrides": {
     "axios": "^1.13.5",
-    "fast-xml-parser": "^5.3.4",
+    "fast-xml-parser": "^5.3.6",
     "@isaacs/brace-expansion": "^5.0.1",
     "pretty-format": {
       "react-is": "19.0.0"
     },
-    "react": "^19.0.0",
-    "fast-xml-parser": "^5.3.4"
+    "react": "^19.0.0"
 
   },
   "scripts": {