Homepage
About Snyk

@clickbar/dot-diver@1.0.0 vulnerabilities

Types and utilities to access object properties by dot notation.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @clickbar/dot-diver package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Prototype Pollution

@clickbar/dot-diver is a Types and utilities to access object properties by dot notation.

Affected versions of this package are vulnerable to Prototype Pollution in the setByPath function. An attacker can manipulate the prototype of an object and inject arbitrary properties into existing JavaScript objects by passing a malicious object.

How to fix Prototype Pollution?

Upgrade @clickbar/dot-diver to version 1.0.3 or higher.

<1.0.3
Go back to all versions of this package