Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

jest-enzyme: vulnerability related to unset-value #369

Open
umeshshimpi opened this issue Apr 28, 2022 · 1 comment
Open

jest-enzyme: vulnerability related to unset-value #369

umeshshimpi opened this issue Apr 28, 2022 · 1 comment

Comments

@umeshshimpi
Copy link

We are seeing vulnerability in jest-enzyme version 7.1.2 which is using [email protected]
The fix for this is to upgrade unset-value to 2.0.1
https://security.snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660
here's the dependency tree:
└─┬ [email protected] └─┬ [email protected] └─┬ [email protected] └─┬ @jest/[email protected] └─┬ @jest/[email protected] └─┬ [email protected] └─┬ [email protected] └─┬ [email protected] └─┬ [email protected] └── [email protected]

Can you help with this please?

@ljharb
Copy link
Member

ljharb commented Apr 28, 2022

Prototype pollution isn't really an attack vector when it's in your test framework - anyone who has the authority to write tests already can do far more dangerous things.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants