protobuf.js
protobuf.js copied to clipboard
Backport prototype setProperty checks to 6.11.3
Hey can you please backport the additional prototypesetProperty check added in #1899 to v.6.11.3 similar to how you backported the first check here
Hey @bcoe 👋 You reviewed the original PR so could you review @jportner PR?
This backport would be extremely helpful
This help to avoid https://nvd.nist.gov/vuln/detail/CVE-2023-36665 without upgrade a major version
Hey @ramy-abbas @mizevkon , We're part of a startup called Seal Security that mitigates software vulnerabilities in older open source versions by backporting/creating standalone security patches - enabling more straightforward remediation in cases like this. We created an protobufjs 6.11.3-sp1 that's vulnerability-free. As with all of our patches, it's open-source and available for free.
If relevant, check out our GitHub repo if you wish to learn more, or start using our app.
Please feel free to reach us at [email protected] if you have any requests/questions.
There is version 6.11.4 published to NPM, however there was no explicit changelog or other announcement. According to commits, changes are about the requested backport