Skip to content
OpenAdvisories
High · 7.6 CVE-2021-3666 EUVD-2021-1949GHSA-2ghc-6v89-pw9j

Prototype Pollution in fiznool/body-parser-xml

Published Sep 13, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: fiznool Product: fiznool/body-parser-xml Package: body-parser-xml Ecosystem: npm

Description

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected products

VendorProductAffectedFixed
fiznool fiznool/body-parser-xml unspecified – < 2.0.3 2.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
npm body-parser-xml < 2.0.3 2.0.3 GHSA-2ghc-6v89-pw9j

References