Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Dependency: datatables.net #392

Open
alivianmuir opened this issue Oct 17, 2024 · 0 comments
Open

Update Dependency: datatables.net #392

alivianmuir opened this issue Oct 17, 2024 · 0 comments

Comments

@alivianmuir
Copy link

Environment (please complete the following information)

  • multiple-cucumber-html-reporter: 3.8.0

Describe the bug

The datatables.net package is vulnerable to Prototype Pollution. The setData function in jquery.dataTables.js fails to protect prototype attributes when objects are created during the application's execution. A remote attacker can exploit this to modify the behavior of object prototypes which, depending on their use in the application, may result in a Denial of Service (DoS), Remote Code Execution (RCE), or other unexpected execution flow.

Additional context

There is a newer version of datatables.net that prevents prototype pollution. Please refer to:
DataTables/Dist-DataTables@e2e19ea#diff-e7d8309f017dd2ef6385fa8cdc1539a2R2765

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant