github_osv/GHSA-8v63-cqqc-6r2c
Prototype Pollution in object-path
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). The `del()` function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like `toString` on all objects.
gitlab/npm/object-path/CVE-2021-3805
Improperly Controlled Modification of Dynamically-Determined Object Attributes
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')