Fix prototype pollution vulnerabilities

[kessiler]

Fix CVE-2020-7637

Better description:
https://nvd.nist.gov/vuln/detail/CVE-2020-7637

While this PR is not merged in the upstream, feel free to use the direct commit hash.

Or kessiler@526bc64

[beeman]

@NoNameProvided could you consider merging in this fix? GitHub repo's are complaining about it, it would be great if it could be fixed! 🙏

I think #341 is related but this PR seems more complete as it has a unit test.

[kessiler]

@AeroNotix what else should we do to get this merged?

[AeroNotix]

I have no idea I just clicked approve because I approve. I don't have access to merge anything. I just want it merged, just like you.

[tbrannam]

@MichalLytek any chance this is on your radar?

[MichalLytek]

@tbrannam not at all ☹️

[cristianbriscaru]

Hi, I am having the same issue, any news as to when to pr is going to be merged ?

[tbrannam]

@pleerock @NoNameProvided can this issue be resolved? Or is this project officially abandoned?

[tbrannam]

@tbrannam not at all ☹️

@MichalLytek As a member of 'typestack' organization - are you able to inquire with the other members regarding this patch and/or repository?

[longtomjr]

@tbrannam not at all frowning_face

As a member of 'typestack' organization - are you able to inquire with the other members regarding this patch and/or repository?

#338 (comment)

[jotamorais]

@kessiler as @saulotoledo mentioned above, your commits were updated through the #367 as build/tests were failing after the migration to use jest/eslint.

Since it's now merged, I'm closing this PR.

Thank you for your contribution!

[github-actions]

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.