EUVD-2021-2598

Malware in sbrugna...

CVE-2021-23561

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...

CVE-2021-23561

CVE-2021-23561 affects the npm package comb, where the deepMerge() function enables Prototype Pollution. The vulnerability arises from unsafe recursive merge and path-based property assignment, allowing an attacker to modify Object.prototype properties (e.g., proto , constructor, prototype). Docu...