This repository has been archived by the owner on Apr 30, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 60
CVE-2022-37614/Prototype pollution found in mockery.js #77
Comments
If there is a patch for this, please advise. Thanks 👍🏻 |
ghost
referenced
this issue
Aug 12, 2023
This is to prevent the disable method to fail if there is anything on the require cache object that does not have a parent element or children on that parent object. This fixes a problem introduced on PR #57
Hi @wesleyscholl this security vulnerability has been fixed some time ago, as this is making other dependant libraries to detect the vulnerability, when do you think that this will be integrated and the patch released on mockery? |
It would be very nice if this one could be fixed. Any progress or any help needed? Thanks |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f056 via the key variable in mockery.js.
The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/
The text was updated successfully, but these errors were encountered: