CVE-2020-7679 vulnerability in casperjs dependency

wch / webshot

Take screenshots of web pages from R

http://wch.github.io/webshot/

227 stars 40 forks source link

Closed dvasilen closed 2 years ago

dvasilen commented 2 years ago

In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.

wch commented 2 years ago

Casperjs and phantomjs are no longer maintained, so we're not planning on fixing this. Please use webshot2.