CVE-2020-7742

CVE-2020-7742 affects the JavaScript package simpl-schema up to version 1.10.1. The vulnerability is a prototype pollution flaw in the library's merge logic (used for merging inputs into schemas), allowing attacker-controlled input to mutate Object.prototype and potentially lead to remote code ex...