Juan Carlos Valerio issues

Repositories
Issues
Comments

Results 1 issues of


                                            Juan Carlos Valerio

Prototype Pollution by semantic-release-cli > travis-ci > lodash dependency

Versions of lodash before 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep allows a malicious user to modify the prototype of Object via {constructor: {prototype: {...}}} causing the addition...