Prototype Pollution

node-import is vulnerable to prototype pollution. The vulnerability exists due to a lack of sanitization in the index file “index.js”, allowing an attacker to modify and get control of the param attribute.