Description
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381
Related Vulnerabilities
CVE-2023-46494 Vulnerability in npm package @evershop/evershop
CVE-2023-33695 Vulnerability in maven package cn.hutool:hutool-core
CVE-2011-1026 Vulnerability in maven package org.apache.archiva:archiva
CVE-2019-17633 Vulnerability in maven package org.eclipse.che:assembly-wsmaster-war
CVE-2021-32827 Vulnerability in maven package org.mock-server:mockserver-core