Xml2js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xml2js Project records in CISA KEV

No Xml2js Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Xml2js · all components

TI-2023-00798 CVE-2023-0842 · GHSA-776f-qx25-q3cc

MEDIUM 63

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01392 Published 2023-04-05 Partial fix · 0.5.0 CWE-1321