New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

High Severity: Prototype Pollution in JSON5 via Parse Method #23

Open

kmturley opened this issue Dec 30, 2022 · 0 comments · May be fixed by #24

kmturley commented Dec 30, 2022

Your package is vulnerable. could you apply a fix?

$ npm audit

json5  <2.2.2
Severity: high
Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h

node_modules/json5
  loader-utils  <=1.4.2
  Depends on vulnerable versions of json5
  node_modules/loader-utils
    js-yaml-loader  >=1.0.0
    Depends on vulnerable versions of loader-utils
    node_modules/js-yaml-loader

Upgrading https://www.npmjs.com/package/loader-utils should fix the issue:

npm install loader-utils@latest

The text was updated successfully, but these errors were encountered:

kmturley linked a pull request

that will close this issue

Prototype Pollution in JSON5 via Parse Method #24

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment