xml2js is vulnerable to prototype pollution

Question

xml2js <=0.4.23 Severity: high xml2js is vulnerable to prototype pollution - https://github.com/advisories/GHSA-776f-qx25-q3cc No fix available node_modules/xml2js aws-sdk * Depends on vulnerable versions of xml2js node_modules/aws-sdk

2 high severity vulnerabilities

Upgraded aws-sdk npm package to latest version. But vulnerability still exists.

Answer 1

1. delete your package-lock.json,
2. add this to your package.json:

 "overrides": {
   "xml2js": "^0.5.0"
 }

3. reinstall the deps : npm i