CVE-2021-3666: XML Body Parser Project XML Body Parser

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected products

• XML Body Parser Project XML Body Parser: before 2.0.3 (fixed in 2.0.3)

Published 2021-09-13. Last modified 2026-06-17.