GHSA-J32X-J8PJ-PG2H Prototype Pollution in decal

This affects all versions of package decal. The vulnerability is in the extend function...

Prototype Pollution

decal is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the extend function...