-
There is a CVE in xml2js@0.4.23 which is getting pulled in via jsforce@1.11.0.
Please update the xml2js version to 0.5.0 [latest] to resolve this issue. Currently it is consuming `xml2js": "^0.4.16"`
-
chai-xml currently uses xml2js ^0.4.23 but versions < 0.5 have a prototype pollution vulnerability as described in https://github.com/advisories/GHSA-776f-qx25-q3cc
From what I could see in https:/…
-
-
Today we started getting notifications for xml2js libraries having a medium vulnerability. I'd been using an older version 0.4.19 so forced updates to the latest 0.4.23 but the vulnerability remains w…
-
Snyk has identified a _high severity_ vulnerability in package xml2js.
https://security.snyk.io/vuln/SNYK-JS-XML2JS-5414874
---
### Overview
Affected versions of this package are vulnerable …
-
### Describe the bug
There are many dependencies in the library have deprecated or vulnerabilities which has been fixed but not updated, can we update the those libraries for security reasons.
### …
-
The dependency, xml2js, has been reported as having a high severity vulnerability on its latest version. We need to either switch to another dependency or wait until xml2js gets updated to remove the …
-
Vulnerable Library - xml2js-0.4.23.tgz
Simple XML to JavaScript object converter.
Library home page: https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz
## Vulnerabilities
| CVE | Severity | …
-
XML generator (XMLdom, XMLbuilder, XML2JS, etc) in default setting, it creates self-sclosing tags. which Dymo Connect won't open.
-
Any idea - is it possible to use json-viewer for xml?