search

RuntimeTools / appmetrics

Node Application Metrics provides a foundational infrastructure for collecting resource and performance monitoring data for Node.js-based applications.
https://developer.ibm.com/open/node-application-metrics/
Apache License 2.0
975 stars 126 forks source link

Prototype pollution vulnerability in `jszip@2.5.x` #655

Open s100 opened 3 years ago

s100 commented 3 years ago

appmetrics depends on jszip@2.5.x, which has this prototype pollution vulnerability in it. Suggested remediation is to upgrade to jszip@3.7.0 or later.

Here is the upgrade guide for upgrading from jszip 2 to 3.