Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix prototype pollution vulnerability #1828

Merged
merged 1 commit into from Apr 13, 2022

Commits on Apr 8, 2022

  1. Fix prototype pollution vulnerability

    (cherry picked from commit e1ecdbf)
    
    Conflicts:
      lib/internal/iterator.js
      test/mapValues.js
    
    NOTE(mriedem): The conflicts are due to:
    
    - e475117 for iterator.js;
      resolution was trivial
    - bd86f42 for mapValues.js;
      resolution was just copying the test change into the old
      test file before it was moved
    
    This is a 2.x series backport for
    https://nvd.nist.gov/vuln/detail/CVE-2021-43138.
    aearly authored and mriedem committed Apr 8, 2022
    Copy the full SHA
    62aedf4 View commit details
    Browse the repository at this point in the history