Skip to content

Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties

Low severity GitHub Reviewed Published Mar 11, 2026 in sveltejs/devalue • Updated Mar 12, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts