Any patch/fix available for CVE-2020-27511

[Vinay Kumar]

Hi All,

Is there any fix/patch available for the vulnerability  CVE-2020-27511 in Prototype 1.7.3?

Regards,
Vinay Kumar

[Walter Lee Davis]

There is a PR in Github since January 2021 to fix this, but it hasn't made its way through the process yet. The last update was 22 days ago, but I don't know what the timeline will be for this. https://github.com/prototypejs/prototype/pull/349

Walter

> --
> You received this message because you are subscribed to the Google Groups "Prototype & script.aculo.us" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to prototype-scripta...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/prototype-scriptaculous/2e6bc7d2-241c-4eb2-8246-bf5165343a86n%40googlegroups.com.