CVE-2024-24293

The @bit/loader framework, specifically version v.10.0.3 , is vulnerable to a Prototype Pollution issue. The root cause is a lack of __proto property restrictions within the e argument of the M function located in index.js . This flaw can lead to arbitrary code execution . As a mitigation, user...