CVE-2021-20089

CVE-2021-20089 affects purl 2.3.2, where improper modification of Object.prototype attributes enables prototype pollution. Root cause: input handling allows injecting properties into Object.prototype; this can impact confidentiality, integrity, and availability (per CVSS3.1 metrics). The availabl...