Description
body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Remediation
References
https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63
https://huntr.dev/bounties/1-other-fiznool/body-parser-xml
Related Vulnerabilities
CVE-2023-40167 Vulnerability in maven package org.eclipse.jetty:jetty-http
CVE-2023-5654 Vulnerability in npm package react-devtools
CVE-2020-26217 Vulnerability in maven package org.jvnet.hudson:xstream
CVE-2021-25913 Vulnerability in npm package set-or-get
CVE-2022-31147 Vulnerability in maven package org.webjars.bower:jquery-validation