PatchTheCVExml2js project vulnerabilities
Recent CVEs affecting xml2js project products. 1 tracked.
xml2js project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-04-05. Highest priority: CVE-2023-0842 (score 47/100).
- CVE-2023-0842 MEDIUM 5.3 DOWNGRADE xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object
FAQ
How do I fix xml2js project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xml2js project being exploited right now?
None of the tracked xml2js project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xml2js project CVE should I patch first?
CVE-2023-0842 currently ranks highest (47/100): xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object.