CVE-2021-23448

CVE-2021-23448 affects the JavaScript package config-handler. All versions are vulnerable to Prototype Pollution when loading configuration files due to unsafe object merges or path-based property assignment that can modify Object.prototype. Documented impacts include potential DoS or remote code...