Prototype Pollution in object-path

jaydenseric / graphql-upload

Middleware and a scalar Upload to add support for GraphQL multipart requests (file uploads via queries and mutations) to various Node.js GraphQL servers.

https://npm.im/graphql-upload

MIT License

1.43k stars 132 forks source link

Prototype Pollution in object-path #267

Closed shernshiou closed 3 years ago

shernshiou commented 3 years ago

The current version of dependency, object-path has a security vulnerability. However, it is patched on >=0.11.8.