Prototype Pollution

Overview underscore-keypath is a mechanism extensions for underscore mixin. underscore-keypath let you access JavaScript objects and arrays with keypath easily. Affected versions of this package are vulnerable to Prototype Pollution via the name argument of the setProperty function. Exploiting th...