This repository was archived by the owner on Mar 19, 2026. It is now read-only.
Repository navigation
This repository was archived by the owner on Mar 19, 2026. It is now read-only.
vuln: Prototype Pollution and ReDoS introduced via [email protected] #465
Description
Copied from original issue: googleapis/nodejs-datastore#69
March 16, 2018 12:06 AM
Snyk reports vulns:
- Prototype Pollution - Vulnerable module: hoek - Introduced through: [email protected]
- Regular Expression Denial of Service (ReDoS) - Vulnerable module: protobufjs - Introduced through: [email protected]
See: https://snyk.io/test/npm/@google-cloud/datastore
Environment details
- OS: Any
- Node.js version: Any
- npm version: Any
- @google-cloud/datastore version: 1.3.5
Steps to reproduce
N/A
Activity
anishkny commentedon Mar 16, 2018
Snyk report for google-gax v0.15.0: https://snyk.io/test/npm/google-gax/0.15.0
JustinBeckwith commentedon May 16, 2018
This was resolved in 0.16 🎉
Retry npm install in CI (#465)
chore(deps): update dependency puppeteer to v14 (#465)
Retry npm install in CI (#465)
chore(deps): update dependency puppeteer to v14 (#465)
Retry npm install in CI (googleapis#465)