Giters

datavis-tech / json-templates

Simple templating within JSON structures.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Security issue in object-path dependency

santiago-perez-axa opened this issue · comments

commented

There is a critical security issue with the actual version of object-path dependency.

For more details check GHSA-8v63-cqqc-6r2c

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Prototype Pollution in object-path                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ object-path                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ json-templates                                               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ json-templates > object-path                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://github.com/advisories/GHSA-8v63-cqqc-6r2c            │
└───────────────┴──────────────────────────────────────────────────────────────┘
commented

Hi @curran is it possible to have a version with this issue solved? I created the following PR #40