VDB
Sign up
HIGH7.3

GHSA-xrmp-99wj-p6jc

Prototype Pollution in deap

Quick fix

GHSA-xrmp-99wj-p6jc — deap: upgrade to the fixed version with the command below.

npm install deap@1.0.1

Details

Versions of `deap` before 1.0.1 are vulnerable to prototype pollution.

## Recommendation

Update to version 1.0.1 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/deap
Introduced in: 0Fixed in: 1.0.1
Fixnpm install deap@1.0.1

References