Prototype Pollution in mpath
High severity
GitHub Reviewed
Published
Feb 7, 2019
to the GitHub Advisory Database
•
Updated
Sep 7, 2023
Affected versions
< 0.5.1
Versions of
mpath
before 0.5.1 are vulnerable to prototype pollution. Provided certain input
mpath
can add or modify properties of the
Object
prototype. These properties will be present on all objects.
Recommendation
Update to version
0.5.1
or later.
References
Published to the GitHub Advisory Database
Feb 7, 2019
You can’t perform that action at this time.