mockery is vulnerable to prototype pollution

严重 9.8CVE-2022-37614 · GHSA-gmwp-3pwc-3j3g · Published 12/10/2022 · updated 17/06/2026

要点

CVE-2022-37614 是影响 mockery (mockery project), mockery 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.6%，高于 75.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
mockery mockery_project	`= 2.1.0`	No fix yet
mockery npm	`≤ 2.1.0`	No fix yet

Description

Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js.

NVD description

Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js.

References

nvd.nist.gov/vuln/detail/CVE-2022-37614 · ADVISORY
mfncooper/mockery · WEB
mfncooper/mockery · PACKAGE
mfncooper/mockery · WEB
mfncooper/mockery · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free