CVE-2024-38991

CVE-2024-38991 affects the npm library akbr patch-into, version 1.0.1 . The root cause is a prototype pollution flaw in the function patchInto , which can allow an attacker to inject arbitrary properties. This leads to potential remote arbitrary code execution or Denial of Service (DoS) as descri...