CVE-2020-7721

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.