mfncooper/mockery

CVE-2022-37614/Prototype pollution found in mockery.js

secdevlpr26 opened this issue · 3 comments

secdevlpr26 commented

Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f056 via the key variable in mockery.js.

The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/

wesleyscholl commented

If there is a patch for this, please advise. Thanks 👍🏻

JordiSAGE commented

Hi @wesleyscholl this security vulnerability has been fixed some time ago, as this is making other dependant libraries to detect the vulnerability, when do you think that this will be integrated and the patch released on mockery?
Thank you in advance.

  • 👍6
MarioMajcicaAtABNAMRO commented

It would be very nice if this one could be fixed. Any progress or any help needed? Thanks