Description
Versions of deap before 1.0.1 are vulnerable to prototype pollution.
Recommendation
Update the deap package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.0.1
- Patched version(s): 1.0.1
References
Related Issues
- Prototype Pollution in node-forge debug API. - Vulnerability
- Prototype Pollution in lodash.mergewith - Vulnerability
- Prototype Pollution in lodash.mergewith - lodash.mergewith - Vulnerability
- Prototype Pollution in lodash.merge - lodash.merge - Vulnerability
You might also like:
- Tags:
- npm
- deap
Anything's wrong? Let us know Last updated on January 09, 2023