Prototype Pollution in swiper

Description

Versions of the package swiper before 6.5.1 are susceptible to prototype pollution.

Recommendation

Update the swiper package to the latest compatible version. Followings are version details:

• Affected version(s): < 6.5.1
• Patched version(s): 6.5.1

References

• GHSA-p3hc-fv2j-rp68
• snyk.io
• CVE-2021-23370
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults - CVE-2024-38997
• Prototype Pollution in immer - CVE-2021-23436
• MrSwitch hello.js vulnerable to prototype pollution - CVE-2021-26505
• Prototype Pollution in dojo - CVE-2021-23450

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

swiper