xml2js vulnerabilities

Simple XML to JavaScript object converter.

  • latest version

    0.6.2

  • latest non vulnerable version

  • first published

    14 years ago

  • latest version published

    2 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the xml2js package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Prototype Pollution

    <0.5.0

    Package versions

    52 VERSIONS IN TOTAL
    versionpublisheddirect vulnerabilities
    0.6.226 Jul, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    0.6.125 Jul, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    0.6.025 May, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    0.5.09 Apr, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    0.4.2319 Dec, 2019
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    0.4.223 Sep, 2019
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    0.4.212 Sep, 2019
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    0.4.201 Sep, 2019
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    0.4.1922 Aug, 2017
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    0.4.1814 Aug, 2017
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L