multiple-cucumber-html-reporter icon indicating copy to clipboard operation
multiple-cucumber-html-reporter copied to clipboard

Published 20 hours ago • verified publisher icon WasiqB

Update Dependency: datatables.net

Open alivianmuir opened this issue 4 months ago • 0 comments

Environment (please complete the following information)

  • multiple-cucumber-html-reporter: 3.8.0

Describe the bug

The datatables.net package is vulnerable to Prototype Pollution. The setData function in jquery.dataTables.js fails to protect prototype attributes when objects are created during the application's execution. A remote attacker can exploit this to modify the behavior of object prototypes which, depending on their use in the application, may result in a Denial of Service (DoS), Remote Code Execution (RCE), or other unexpected execution flow.

Additional context

There is a newer version of datatables.net that prevents prototype pollution. Please refer to: https://github.com/DataTables/Dist-DataTables/commit/e2e19eac7e5a6f140d7eefca5c7deba165b357eb#diff-e7d8309f017dd2ef6385fa8cdc1539a2R2765

image

alivianmuir avatar Oct 17 '24 13:10 alivianmuir