| Package | Affected versions | Patched versions |
|---|---|---|
| devalue | < 5.6.3 | 5.6.3 |
Under certain circumstances, unevaling untrusted data can produce output code that will create objects with polluted prototypes when later evaled, meaning the output data can be a different shape from the input data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free