Application Security
Prototype pollution bugs still ship in one in five web apps, study finds
An analysis of 9,000 production bundles found outdated helper libraries are the main cause.
/ 5 min read
In briefAn analysis of 9,000 production bundles found outdated helper libraries are the main cause.
Researchers scanned public JavaScript bundles and found vulnerable merge functions in 21 percent of them.
Most cases came from old library versions pulled in as transitive dependencies rather than application code.
Filed under Security ArchitectureApplication Security
Does this story affect you?
Tell us about your environment and a SentriXa security editor will get back to you within one business day.