kriszyp/json-schema

json-schema is vulnerable to Prototype Pollution

NicestRudeGuy opened this issue · 2 comments

NicestRudeGuy commented

Im on the latest version. Any idea when this will be fixed or some alternatives?

image

kriszyp commented

As your screenshot says, it is fixed in 0.4.0. You may have one installation of json-schema that is latest, but probably not the one used by eslint-plugin-typescript-custom-sort-keys, and you probably need to upgrade that.

NicestRudeGuy commented

@kriszyp thanks, it makes sense. Closing.