CVE-2021-23395
CVE-2021-23395 affects all versions of the Nedb package and describes a prototype pollution vulnerability. The issue allows an attacker to add or modify properties on Object.prototype via proto or constructor.prototype payloads, enabling potential DoS or remote code execution paths depending on t...