npm/jsii: low 3.7
Prototype pollution in jsii.configureCategories
Action: Upgrade jsii to 5.4.46 or later.
npm i jsii@5.7.3npm i jsii@5.6.4npm i jsii@5.5.15npm i jsii@5.4.46Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.7.0 | 5.7.3 | - |
| 5.6.0 | 5.6.4 | - |
| 5.5.0 | 5.5.15 | - |
| 5.4.0 | 5.4.46 | - |
Fixed versions
| 5.7.3 | 5.6.4 | 5.5.15 | 5.4.46 |
Sources
- osv: GHSA-m56h-5xx3-2jc2
- https://github.com/aws/jsii-compiler/security/advisories/GHSA-m56h-5xx3-2jc2
- https://github.com/aws/jsii-compiler
- https://github.com/aws/jsii-compiler/releases/tag/v5.4.46
- https://github.com/aws/jsii-compiler/releases/tag/v5.5.15
- https://github.com/aws/jsii-compiler/releases/tag/v5.6.4
- https://github.com/aws/jsii-compiler/releases/tag/v5.7.3
published · modified · JSON