msgpack5@5.2.0 vulnerabilities
A msgpack v5 implementation for node.js and the browser, with extension points
latest version
6.0.2
latest non vulnerable version
first published
10 years ago
latest version published
2 years ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the msgpack5 package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Prototype Pollution when it decodes a map containing a key How to fix Prototype Pollution? Upgrade | >=5.0.0 <5.2.1>=4.0.0 <4.5.1<3.6.1 |
msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Prototype Pollution via the decoder. How to fix Prototype Pollution? Upgrade | >=5.0.0 <5.2.1>=4.0.0 <4.5.1<3.6.1 |