[material-ui] Prototype pollution security vulnerabililty in @mui/utils about material-ui

[tjcouch-sil]

Snyk let me know they're investigating the report. I'll keep you updated!

[oliviertassinari]

Ok, it was closed, back to normal 👍

https://security.snyk.io/vuln/SNYK-JS-MUIUTILS-7231125

[DiegoAndai]

Thanks for the report @rsellucian! I created a PR to cherry pick the fix to v5

[tjcouch-sil]

@tjcouch-sil could you flag https://security.snyk.io/vuln/SNYK-JS-MUIUTILS-7231125 as false? It has no reproductions, so would tend to confirm #41652 (comment).

Unfortunately I don't have any direct access to be able to flag it directly, but I submitted a request for them to flag it as a false positive. Context here

[rsellucian]

@DiegoAndai Thank you for jumping on this so quickly.

[oliviertassinari]

@tjcouch-sil could you flag https://security.snyk.io/vuln/SNYK-JS-MUIUTILS-7231125 as false? It has no reproductions, so would tend to confirm #41652 (comment).

[oliviertassinari]

@tjcouch-sil Ok, thanks

[tjcouch-sil]

Update: the issue is up to their R&D team to do further investigation.