popsicle is vulnerable to Prototype Pollution

[Bhavesh-Ahalani]

popsicle is using popsicle-cookie-jar 1.0.0 which is vulnerable to Prototype Pollution

Reference:
GHSA-72xf-g2v4-qvf3

[SimeonC]

Once popsicle-cookie-jar has updated we can just run npm update popsicle-cookie-jar and it should fix the vulnerability (and as long as it's just a 1.0.0 -> 1.0.1 release)

• tough-cookie is vulnerable to Prototype Pollution popsicle-cookie-jar#11
• Update tough-cookie to fix vulnerability report popsicle-cookie-jar#12

└─ [email protected]
   └─ [email protected]
      └─  [email protected]

[blakeembrey]

The latest release includes the updated popsicle-cookie-jar. This was only a vulnerability if you happened to be using a custom CookieJar with rejectPublicSuffixes=false.