immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477

A prototype pollution flaw was found in the Node.js immer module. By adding or modifying properties of Object.prototype using a proto or constructor payload, an attacker could execute arbitrary code on the system...