{"action":"Upgrade body-parser-xml to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"}],"component":"body-parser-xml","cve_ids":["CVE-2021-3666"],"ecosystem":"npm","epss":0.01299,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-2ghc-6v89-pw9j","id":"tcs_01M5KET2CFZPQ8R6A86KTWFKPY","modified_at":"2023-11-08T04:06:15.314099Z","published_at":"2021-09-14T20:25:35Z","references":["https://osv.dev/vulnerability/GHSA-2ghc-6v89-pw9j","https://nvd.nist.gov/vuln/detail/CVE-2021-3666","https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63","https://github.com/fiznool/body-parser-xml","https://huntr.dev/bounties/1-other-fiznool/body-parser-xml"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-2ghc-6v89-pw9j","url":"https://osv.dev/vulnerability/GHSA-2ghc-6v89-pw9j"}],"summary":"body-parser-xml vulnerable to Prototype Pollution"}