Skip to content

fix: Avoid iterating over prototype properties#437

Merged
karfau merged 1 commit into
masterfrom
avoid-in
Oct 11, 2022
Merged

fix: Avoid iterating over prototype properties#437
karfau merged 1 commit into
masterfrom
avoid-in

Conversation

@karfau

@karfau karfau commented Oct 11, 2022

Copy link
Copy Markdown
Member

by adding hasOwnProperty checks.

#436

@karfau karfau marked this pull request as draft October 11, 2022 02:48
@karfau karfau marked this pull request as ready for review October 11, 2022 03:02
@karfau karfau merged commit 6956ec4 into master Oct 11, 2022
@karfau karfau deleted the avoid-in branch October 11, 2022 03:02
by adding `hasOwnProperty` checks.

#436
@karfau karfau added this to the 0.9.0 milestone Oct 11, 2022
chrisvariety added a commit to thoughtindustries/saml2 that referenced this pull request Oct 13, 2022
bbyars added a commit to mountebank-testing/mountebank that referenced this pull request Oct 16, 2022
mfulton26 added a commit to mfulton26/expo-cli that referenced this pull request Oct 19, 2022
[Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom · CVE-2022-37616 · GitHub Advisory Database](GHSA-9pgh-qqpf-7wqj)

`@xmldom/xmldom` has already been patched:

[fix: Avoid iterating over prototype properties by karfau · Pull Request expo#437 · xmldom/xmldom](xmldom/xmldom#437)

newer versions exist but this is the latest patch version and there shoudln't be any breaking changes

`yarn build` and `yarn test`
EvanBacon pushed a commit to expo/expo-cli that referenced this pull request Oct 28, 2022
[Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom · CVE-2022-37616 · GitHub Advisory Database](GHSA-9pgh-qqpf-7wqj)

`@xmldom/xmldom` has already been patched:

[fix: Avoid iterating over prototype properties by karfau · Pull Request #437 · xmldom/xmldom](xmldom/xmldom#437)

newer versions exist but this is the latest patch version and there shoudln't be any breaking changes

`yarn build` and `yarn test`
KeithScheiwiller pushed a commit to KeithScheiwiller/mountebank that referenced this pull request Sep 12, 2025
KeithScheiwiller pushed a commit to KeithScheiwiller/mountebank that referenced this pull request Sep 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant