CVE-2022-37614/Prototype pollution found in mockery.js

mfncooper / mockery

Simplifying the use of mocks with Node.js

Other

1.1k stars 60 forks source link

CVE-2022-37614/Prototype pollution found in mockery.js #77

Open secdevlpr26 opened 1 year ago

secdevlpr26 commented 1 year ago

Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js.

The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/

wesleyscholl commented 1 year ago

If there is a patch for this, please advise. Thanks 👍🏻

JordiSAGE commented 11 months ago

Hi @wesleyscholl this security vulnerability has been fixed some time ago, as this is making other dependant libraries to detect the vulnerability, when do you think that this will be integrated and the patch released on mockery? Thank you in advance.

MarioMajcicaAtABNAMRO commented 4 months ago

It would be very nice if this one could be fixed. Any progress or any help needed? Thanks