Prototype Pollution in deap

Description

Versions of deap before 1.0.1 are vulnerable to prototype pollution.

Recommendation

Update the deap package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.0.1
• Patched version(s): 1.0.1

References

• GHSA-xrmp-99wj-p6jc
• hackerone.com
• www.npmjs.com
• snyk.io
• CWE-400

Related Issues

• uPlot Prototype Pollution vulnerability - CVE-2024-21489
• jquery-plugin-query-object contains prototype pollution vulnerability - CVE-2021-20083
• matrix-js-sdk Prototype Pollution vulnerability - CVE-2022-36059
• Prototype Pollution in mithril - Vulnerability

Tags:

npm

deap