Vulnerabilities
Summary — last 7 days
New vulnerabilities5,356▲ 1,794 vs. last week
Critical / high2,675▲ 949 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)756▲ 547 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.3) | 1.4% | — | Xml2js Project Xml2js | 4/5/2023 | 6/17/2026 | xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited. |