CVE-2020-7707: Improperly Controlled Modification of Object Prototype Attributes

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

CVE-2005-1154: Undefined Security Weakness

Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."...

Cross-site Scripting through global scope pollution — Mozilla

As you browse from site to site each new page should start with a clean slate. shutdown reports a technique that pollutes the global scope of a window in a way that persists from page to page. A malicious script could define a setter function for a variable known to be used by a popular site, and...