javascript-obfuscator · sanex3339 · Feb 28, 2021 · Feb 28, 2021
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 Change Log
 
+v2.10.7
+---
+* Fixed CVE-2019-18413. Fixed https://github.com/javascript-obfuscator/javascript-obfuscator/issues/880
+
 v2.10.6
 ---
 * Added support of `top-level await`. Fixed https://github.com/javascript-obfuscator/javascript-obfuscator/issues/884

diff --git a/dist/index.browser.js b/dist/index.browser.js
diff --git a/dist/index.cli.js b/dist/index.cli.js
diff --git a/dist/index.js b/dist/index.js
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "javascript-obfuscator",
-  "version": "2.10.6",
+  "version": "2.10.7",
   "description": "JavaScript obfuscator",
   "keywords": [
     "obfuscator",

diff --git a/src/options/Options.ts b/src/options/Options.ts
@@ -60,6 +60,7 @@ export class Options implements IOptions {
      * @type {ValidatorOptions}
      */
     private static readonly validatorOptions: ValidatorOptions = {
+        forbidUnknownValues: true,
         validationError: {
             target: false
         }