Prototype Pollution in deap

Description

Versions of deap before 1.0.1 are vulnerable to prototype pollution.

Recommendation

Update the deap package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.0.1
• Patched version(s): 1.0.1

References

• GHSA-xrmp-99wj-p6jc
• hackerone.com
• www.npmjs.com
• snyk.io
• CWE-400

Related Issues

• vue-i18n has cross-site scripting vulnerability with prototype pollution - CVE-2024-52809
• vue-i18n has cross-site scripting vulnerability with prototype pollution - vue-i18n - CVE-2024-52809
• Prototype pollution in emit function - Vulnerability
• node-opcua-alarm-condition prototype pollution vulnerability - CVE-2024-57086

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

deap