Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2541795
AlmaLinux
6159
Alpaquita
16704
Alpine
4698
Android
3701
Azure Linux
19203
BellSoft Hardened Containers
840
Bitnami
9869
Chainguard
1250862
CleanStart
7683
CRAN
14
crates.io
2833
Debian
71354
Echo
9069
GHC
3
GIT
114555
GitHub Actions
55
Go
9586
Hackage
33
Hex
379
Julia
1713
Linux
30677
Mageia
6299
Maven
7085
MinimOS
181854
npm
229894
NuGet
1924
opam
29
openEuler
9080
openSUSE
14887
OSS-Fuzz
4026
Packagist
7182
Pub
12
PyPI
25896
Red Hat
23995
Rocky Linux
4531
Root
19712
RubyGems
5397
SUSE
23887
SwiftURL
61
TuxCare
17515
Ubuntu
67769
VSCode
21
Wolfi
330749
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-234
npm/xml2js-js
Malicious code in xml2js-js (npm)
12 Jan
No fix available
GHSA-776f-qx25-q3cc
npm/xml2js
xml2js is vulnerable to prototype pollution
05 Apr 2023
Fix available
Severity - 5.3 (Medium)
npm - OSV
