Advisory Weakness Curation

Prototype Pollution in node.extend Versions of `node.extend` before 1.1.7 or 2.0.1 are vulnerable to prototype pollution. ## Recommendation Update to version 1.1.7, 2.0.1 or later.

Injection Vulnerability A prototype pollution vulnerability in node.extend allows an attacker to inject arbitrary properties onto `Object.prototype`.