Open secdevlpr26 opened 1 year ago
If there is a patch for this, please advise. Thanks 👍🏻
Hi @wesleyscholl this security vulnerability has been fixed some time ago, as this is making other dependant libraries to detect the vulnerability, when do you think that this will be integrated and the patch released on mockery? Thank you in advance.
It would be very nice if this one could be fixed. Any progress or any help needed? Thanks
Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js.
The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/