High Severity Vulnerability

webroo / dummy-json

Generates random dummy JSON data in Node.js

MIT License

380 stars 61 forks source link

High Severity Vulnerability #32

Closed akr24 closed 4 years ago

akr24 commented 5 years ago

Handlebars versions <4.3.0 are susceptible to prototype pollution, as shown here in this npm advisory: https://www.npmjs.com/advisories/1164. Is it possible for the handlebars version in this package to be updated to something >=4.3.0?

webroo commented 4 years ago

This was fixed in #33, sorry it took so long to merge.