New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prototype pollution vulnerability in `[email protected]` #655

Open

s100 opened this issue Sep 6, 2021 · 0 comments · May be fixed by #656

s100 commented Sep 6, 2021

appmetrics depends on [email protected], which has this prototype pollution vulnerability in it. Suggested remediation is to upgrade to [email protected] or later.

Here is the upgrade guide for upgrading from jszip 2 to 3.

The text was updated successfully, but these errors were encountered:

lux01 added a commit to lux01/appmetrics that referenced this issue


          Upgrade jszip to 3.x. Fixes RuntimeTools#655

d392ab0

lux01 linked a pull request

that will close this issue

Upgrade jszip to 3.x to resolve CVE-2021-23413 #656

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment