CVE-2022-37614
1 advisory.
npm/mockery CVE-2022-37614: critical 9.8, EPSS 1.55%
mockery is vulnerable to prototype pollution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gmwp-3pwc-3j3g
- https://nvd.nist.gov/vuln/detail/CVE-2022-37614
- https://github.com/mfncooper/mockery/issues/77
- https://github.com/mfncooper/mockery
- https://github.com/mfncooper/mockery/blob/822f0566fd6d72af8c943ae5ca2aa92e516aa2cf/mockery.js#L119
- https://github.com/mfncooper/mockery/blob/822f0566fd6d72af8c943ae5ca2aa92e516aa2cf/mockery.js#L62
CVE-2022-37614 · published · modified · JSON