CVE-2020-7725

Worksmith is vulnerable to a prototype pollution flaw via the setValue function. Affected versions are all prior to 1.0.1 (up to 1.0.0). The issue enables pollution of Object.prototype through unsafe merging or path-based setting, with potential to impact application behavior. Remediation guidanc...