[Snyk] Upgrade xml2js from 0.4.23 to 0.6.2

[vnisor]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade xml2js from 0.4.23 to 0.6.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 7 months ago, on 2023-07-26.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-XML2JS-5414874	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: xml2js

• 0.6.2 - 2023-07-26
  

  New release, 0.6.2

• 0.6.1 - 2023-07-25
  

  Update version number for release 0.6.1

• 0.6.0 - 2023-05-25
  

  Release new version

• 0.5.0 - 2023-04-09
  

  Update package.json with latest PR

• 0.4.23 - 2019-12-19

from xml2js GitHub release notes

Commit messages

Package name: xml2js

• cf3e061 New release, 0.6.2
• cb2f77e Fix read-only constraint via mistyped key name
• 8e9a120 Update version number for release 0.6.1
• 30f9d61 Replace filtering of names with `defineProperty`
• ba46e54 Update package lock
• 0e29f0e Release new version
• a25035c Remove old unused files
• 1de4688 Merge pull request Google Tasks Node n8n-io/n8n#680 from Leonidas-from-XIV/zap-dependency-fix
• 3b97ae5 Merge pull request ✍️ Make a few language changes n8n-io/n8n#681 from Leonidas-from-XIV/cve-compat-fix
• 167a385 Fix zap to be the original dependency
• 5f6620f Compile changed coffeescript code
• 044cfe5 Undo API changes from ✨ Hootsuite Integration n8n-io/n8n#603
• 7292aa9 fix: include missed key check
• 4c8ec89 fix: revert incorrectly adapted code
• ad3a297 refactor: extract function for key check
• d486007 fix: explicitly ignore vulnerable properties
• 246252a chore: revert previous CVE fix
• b856cb8 Add upper bound for coffeescript (for now)
• bd0f780 Bump dependency versions to fix security issues
• 3a8d46e Update lockfile
• 9f730bb Update package.json with latest PR
• 50a492a Merge pull request ✨ Hootsuite Integration n8n-io/n8n#603 from autopulated/master
• 7bc3c5d Merge pull request [packages/editor-ui] Upgrade @vue/cli-plugin-typescript to version 4.4.1 n8n-io/n8n#598 from fnimick/master
• f412a12 Merge pull request Webflow OAuth2 support n8n-io/n8n#635 from wisesimpson/patch-1

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs