CRITICAL9.8
GHSA-mqgv-67vx-g4m5
Prototype Pollution in js-data
Quick fix
GHSA-mqgv-67vx-g4m5 — js-data: upgrade to the fixed version with the command below.
npm install js-data@3.0.10Details
All versions of package js-data prior to 3.0.10 are vulnerable to Prototype Pollution via the `deepFillIn` function.
Are you affected?
Enter the version of the package you're using.