pythonsecurityaws-sdkxml2js

xml2js is vulnerable to prototype pollution

xml2js <=0.4.23 Severity: high xml2js is vulnerable to prototype pollution - https://github.com/advisories/GHSA-776f-qx25-q3cc No fix available node_modules/xml2js aws-sdk * Depends on vulnerable versions of xml2js node_modules/aws-sdk

2 high severity vulnerabilities

Upgraded aws-sdk npm package to latest version. But vulnerability still exists.

Solution
    1. delete your package-lock.json,
    2. add this to your package.json:
     "overrides": {
   "xml2js": "^0.5.0"
 }
    1. reinstall the deps : npm i