github_osv/GHSA-jgpq-g82g-6c39
confinit vulnerable to prototype pollution
confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
gitlab/npm/confinit/CVE-2020-7638
Improper Input Validation
confinit is vulnerable to Prototype Pollution. The `setDeepProperty` function could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.