json5 (npm)

JSON5 — JSON for Humans

Advisories

Latest version

2.2.3

Released Dec 31, 2022

License

MIT

OpenSSF Scorecard

3.8 / 10

How to fix

Upgrading to 2.2.2 or later clears every advisory below that has a fix.

Upgrade commands

npm

npm install json5@2.2.3

yarn

yarn add json5@2.2.3

pnpm

pnpm add json5@2.2.3

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-9c47-m6qq-7p4h Prototype Pollution in JSON5 via Parse Method	High EPSS 9.70%	`>= 2.0.0, < 2.2.2`	`2.2.2`
GHSA-9c47-m6qq-7p4h Prototype Pollution in JSON5 via Parse Method	High EPSS 9.70%	`< 1.0.2`	`1.0.2`

Source: git+https://github.com/json5/json5.git

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor