Prototype Pollution

ramda is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the curry2 function in the mapObjIndexed.js and modify attributes such as proto, constructor, and prototype. This vulnerability has been disputed and is pending further information...