github_osv/GHSA-45q2-34rf-mr94
Code Injection in mquery
lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.
gitlab/npm/mquery/CVE-2020-35149
Object Parameter Pollution
The `lib/utils.js` in mquery allows a pollution attack because a special property (e.g., `__proto__`) can be copied during a merge or clone operation.