Snyk Vulnerability - Prototype Pollution flagged in @zag-js/core

[veloware]

Our Synk pipeline has started to report this vulnerability in @zag-js/core - https://security.snyk.io/vuln/SNYK-JS-ZAGJSCORE-8706732

Any help / advice is appreciated.

🐛 Bug report

💥 Steps to reproduce

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

💻 Link to reproduction

CodeSandbox reproduction: https://your-codesandbox-link-goes-here.io

🧐 Expected behavior

🧭 Possible Solution

🌍 System information

Software	Version(s)
Zag Version
Browser
Operating System

📝 Additional information

[sinchang]

@segunadebayo Can we have a patch version for this security issue? thank you

[joye-shonubi]

Bump on this. Impacting user trust with high severity notice @segunadebayo

[segunadebayo]

I just pushed a fix for this. We'll release a patch update shortly.

If the issue persists after upgrading, I'll re-open it.