hono - npm Package Compare versions

Comparing version 4.12.6 to 4.12.7

dist/cjs/utils/body.js

@@ -78,2 +78,5 @@ var __defProp = Object.defineProperty;
 const handleParsingNestedValues = (form, key, value) => {
+  if (/(?:^|\.)__proto__\./.test(key)) {
+    return;
+  }
   let nestedForm = form;
@@ -80,0 +83,0 @@ const keys = key.split(".");

dist/utils/body.js

@@ -57,2 +57,5 @@ // src/utils/body.ts
 var handleParsingNestedValues = (form, key, value) => {
+  if (/(?:^|\.)__proto__\./.test(key)) {
+    return;
+  }
   let nestedForm = form;
@@ -59,0 +62,0 @@ const keys = key.split(".");

package.json

 {
   "name": "hono",
-  "version": "4.12.6",
+  "version": "4.12.7",
   "description": "Web framework built on Web Standards",
@@ -5,0 +5,0 @@ "main": "dist/cjs/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1363172

0.01%

Lines of code

35864

0.02%

No dependency changes