← Back

Xml2js

xml2js

Vendor: Xml2js Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0842
1Xml2js Project
1Xml2js
Jun 17, 2026
Apr 5, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property t...Show more
xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited.Show less