flatiron/union

Prototype Override Protection Bypass Vulnerability

drewjenkins opened this issue · 1 comments

See https://snyk.io/vuln/npm:qs:20170213

To resolve, upgrade your version of qs

I notice that union currently specifies qs ~2.3.3. Snyk suggests >=6.4.0 to fix this vulnerability, so the large version jump might entail significant changes.