Advisory Weakness Curation

Prototype Pollution in cached-path-relative Version of `cached-path-relative` before 1.0.2 are vulnerable to prototype pollution. ## Recommendation Update to version 1.0.2 or later.

Improper Input Validation A prototype pollution attack in cached-path-relative allows an attacker to inject properties on `Object.prototype` which are then inherited by all the JS objects through the prototype chain causing a DoS attack.