Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-37614 EUVD-2022-7097GHSA-gmwp-3pwc-3j3g

mockery is vulnerable to prototype pollution

Published Oct 12, 2022 · Updated May 15, 2025 · Assigned by mitre

Description

Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js.

Affected packages

EcosystemPackageAffectedFixedRecord
npm mockery <= 2.1.0 — GHSA-gmwp-3pwc-3j3g

References