search

nuysoft / Mock

A simulation data generator
http://mockjs.com
Other
19.53k stars 2.66k forks source link

react+vite 项目下载mockjs 和 vite-plugin-mock 提示npm包高等漏洞 #511

Open zhouzhouya1 opened 8 months ago

zhouzhouya1 commented 8 months ago

react+vite 项目下载mockjs 和 vite-plugin-mock 提示npm包高等漏洞

zhouzhouya1 commented 8 months ago

提示问题是： mockjs * Severity: high mockjs vulnerable to Prototype Pollution via the Util.extend function - https://github.com/advisories/GHSA-mh8j-9jvh-gjf6 No fix available node_modules/mockjs

hyx-fly commented 5 months ago

这库已经很久没维护了,有问题也没人解决啊

tgx1587900660 commented 5 months ago

这库已经很久没维护了,有问题也没人解决啊

有解决也没人合并啊

wll8 commented 5 months ago

试试这个呢

https://github.com/wll8/mockm