npm/body-parser-xml CVE-2021-3666: high 7.6, EPSS 1.30%
body-parser-xml vulnerable to Prototype Pollution
Action: Upgrade body-parser-xml to 2.0.3 or later.
npm i body-parser-xml@2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-2ghc-6v89-pw9j
- https://nvd.nist.gov/vuln/detail/CVE-2021-3666
- https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63
- https://github.com/fiznool/body-parser-xml
- https://huntr.dev/bounties/1-other-fiznool/body-parser-xml
CVE-2021-3666 · published · modified · JSON