CVE-2021-3666

Improperly Controlled Modification of Dynamically-Determined Object Attributes in npm/body-parser-xml

Identifiers

CVE-2021-3666

Package Slug

npm/body-parser-xml

Vulnerability

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Description

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected Versions

All versions before 2.0.3

Solution

Upgrade to version 2.0.3 or above.

Last Modified

2021-09-24

source