CVE-2021-23396

The CVE-2021-23396 entry concerns the lutils package and a Prototype Pollution flaw in the main merge function. The vulnerability stems from an unsafe recursive merge that can serialize an attacker-controlled input into Object.prototype (via proto or path-based pollution), enabling manipulation o...