Skip to content

fix: Object write with a crafted key can pollute a shared prototype and cause denial of service (GHSA-rx55-fw4j-pvpx) - #10790

Merged
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-rx55-fw4j-pvpx-9
Oct 15, 2026
Merged

mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-rx55-fw4j-pvpx-9

fix: GHSA-rx55-fw4j-pvpx

7cbb94b
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Oct 15, 2026 in 1s

94.02% (-0.01%) compared to 0b33504, passed because coverage increased by 0% when compared to adjusted base (94.02%)

View this Pull Request on Codecov

94.02% (-0.01%) compared to 0b33504, passed because coverage increased by 0% when compared to adjusted base (94.02%)

Details

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.02%. Comparing base (0b33504) to head (7cbb94b).
⚠️ Report is 1 commits behind head on alpha.

Additional details and impacted files
@@            Coverage Diff             @@
##            alpha   #10790      +/-   ##
==========================================
- Coverage   94.03%   94.02%   -0.01%     
==========================================
  Files         193      193              
  Lines       17238    17239       +1     
  Branches      259      259              
==========================================
  Hits        16209    16209              
- Misses       1007     1008       +1     
  Partials       22       22              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.