Patch request for vulnerability CVE-2022-2564 (prototype pollution) in version 5.x

[shubanker]

Prerequisites

• I have written a descriptive issue title
• I have searched existing issues to ensure the issue has not already been raised

Issue

we have a vulnerability CVE-2022-2564 for version 5.x. The CVS score is 7.0.

Please let us know if you will be providing a patch for 5.x.
We noticed that this was already fixed in 6.x with patch

It would be great if you can downport to 5.x at the earliest.

[neeraj-vts]

@shubanker Github advisory GHSA-f825-f98c-gj3g is still showing fix version 6.4.6 . Does it take time generally to get updated there ?

[shubanker]

@neeraj-vts not sure, maybe @vovikhangcdv or @vkarpov15 can help fix the status.

[Uzlopak]

It has to be manually reported to Github from the place where the security issue was created in the first place. So probably @vkarpov has to update it in huntr.dev

[neeraj-vts]

@vkarpov15 Could you update above please ?

[vkarpov15]

It looks like this was already fixed, GHSA-f825-f98c-gj3g lists 5.13.15 as a patched version.