Skip to content

Fix the prototype pollution vulnerability found in extend function. - #548

Closed
glunn wants to merge 1 commit into
CodeByZach:masterfrom
glunn:fix-CVE-2024-53391-prototype-pollution-vuln
Closed

glunn wants to merge 1 commit into
CodeByZach:masterfrom
glunn:fix-CVE-2024-53391-prototype-pollution-vuln

Conversation

@glunn

@glunn glunn commented Jan 9, 2026

Copy link
Copy Markdown

Reference: #546

@CodeByZach

Copy link
Copy Markdown
Owner

Thanks for this PR. Your key filter in extend is the basis of the fix in 1.3.0, together with two other changes, and you're credited in GHSA-5fmc-v4p3-pqpg. We didn't merge this branch itself because it also renames __extends to __s in one place, which makes pace throw when it loads. Closing in favor of the release.

@CodeByZach CodeByZach closed this Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants