vivekmore / generator-jhipster-nav-element / 512

99%

push

travis-ci

🆙: upgrade "kind-of"

CVE-2019-20149
moderate severity
Vulnerable versions: < 6.0.3
Patched version: 6.0.3
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.

34 of 42 branches covered (80.95%)

Branch coverage included in aggregate %.

297 of 297 relevant lines covered (100.0%)

2.79 hits per line