← Back

Xml2js Project

xml2js_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Xml2js
xml2js
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0842
1Xml2js Project
1Xml2js
Jun 17, 2026
Apr 5, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property t...Show more
xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited.Show less