← All tasks
javascriptSBoudrias/Inquirer.js #833Not a task: already works

Lodash vulnerability <4.17.12

envgap__SBoudrias__Inquirer.js-833

Original GitHub issue ↗Dated source checkout ↗Opened 2019-08-06

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.
Not a benchmark task.
  • The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit
2fbec5c5ab53c9d6f14690758a92ec398d8fbbe0
Manifest
packages/inquirer/package.json
Reproduce
Awaiting issue-specific recipe
Run under trace
Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

SBoudrias/Inquirer.js #833 · read the original issue
https://www.npmjs.com/advisories/1065



Versions of lodash before 4.17.12 are vulnerable to Prototype Pollution.
Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched
[]