|
1 | 1 | ###Unreleased[[code][c-unreleased],[diff][d-unreleased]] |
2 | 2 |
|
3 | 3 | [c-unreleased]:https://github.com/json5/json5/tree/main |
4 | | -[d-unreleased]:https://github.com/json5/json5/compare/v2.2.1...HEAD |
| 4 | +[d-unreleased]:https://github.com/json5/json5/compare/v2.2.2...HEAD |
| 5 | + |
| 6 | +###v2.2.2[[code][c2.2.2],[diff][d2.2.2]] |
| 7 | + |
| 8 | +[c2.2.2]:https://github.com/json5/json5/tree/v2.2.2 |
| 9 | +[d2.2.2]:https://github.com/json5/json5/compare/v2.2.1...v2.2.2 |
5 | 10 |
|
6 | 11 | - Fix: Properties with the name`__proto__` are added to objects and arrays. |
7 | | - ([#199]) |
| 12 | + ([#199]) This also fixes a prototype pollution vulnerability reported by |
| 13 | + Jonathan Gregson! ([#295]). |
8 | 14 |
|
9 | 15 | ###v2.2.1[[code][c2.2.1],[diff][d2.2.1]] |
10 | 16 |
|
@@ -372,3 +378,4 @@ parser for the regular JSON format. |
372 | 378 | [#236]:https://github.com/json5/json5/issues/236 |
373 | 379 | [#244]:https://github.com/json5/json5/issues/244 |
374 | 380 | [#266]:https://github.com/json5/json5/issues/266 |
| 381 | +[#295]:https://github.com/json5/json5/issues/295 |