org.webjars.npm:rollbar 2.3.9 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:rollbar package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Prototype Pollution org.webjars.npm:rollbar is an Effortlessly track and debug errors in your JavaScript applications with Rollbar. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. Affected versions of this package are vulnerable to Prototype Pollution via the `merge` function. An attacker can modify the prototype of built-in objects by supplying crafted input to the configuration process. This can lead to unexpected behavior or security issues in the application if untrusted input is passed to configuration. How to fix Prototype Pollution? A fix was pushed into the `master` branch but not yet published.	[0,)
M Prototype Pollution org.webjars.npm:rollbar is an Effortlessly track and debug errors in your JavaScript applications with Rollbar. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. Affected versions of this package are vulnerable to Prototype Pollution via the `utility.set` function. An attacker can modify the prototype of global objects by supplying a crafted payload, potentially leading to application instability or service disruption. Note: The project maintainers have stated that there is no possibility that user input could be used to exploit the prototype pollution described here. The PoC has been validated as a theoretical vector, and a fixed version has been released. How to fix Prototype Pollution? A fix was pushed into the `master` branch but not yet published.	[0,)

Vulnerability

Vulnerable Version

Prototype Pollution

org.webjars.npm:rollbar is an Effortlessly track and debug errors in your JavaScript applications with Rollbar. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly.

Affected versions of this package are vulnerable to Prototype Pollution via the merge function. An attacker can modify the prototype of built-in objects by supplying crafted input to the configuration process. This can lead to unexpected behavior or security issues in the application if untrusted input is passed to configuration.

How to fix Prototype Pollution?

A fix was pushed into the master branch but not yet published.

[0,)

Prototype Pollution

Affected versions of this package are vulnerable to Prototype Pollution via the utility.set function. An attacker can modify the prototype of global objects by supplying a crafted payload, potentially leading to application instability or service disruption.

Note: The project maintainers have stated that there is no possibility that user input could be used to exploit the prototype pollution described here. The PoC has been validated as a theoretical vector, and a fixed version has been released.

How to fix Prototype Pollution?

A fix was pushed into the master branch but not yet published.

[0,)

org.webjars.npm:rollbar@2.3.9 vulnerabilities

latest version

first published

latest version published

licenses detected

package registry

Direct Vulnerabilities

Fix vulnerabilities automatically