Prototype Pollution In devalue
Description
devalue unevaled code can create objects with polluted prototypes when evaled
Under certain circumstances, unevaling untrusted data can produce output code that will create objects with polluted prototypes when later evaled, meaning the output data can be a different shape from the input data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 5.6.3 |
Aliases
1. 2.
References
1. 2. 3.