Description
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381
Related Vulnerabilities
CVE-2023-24620 Vulnerability in maven package com.esotericsoftware.yamlbeans:yamlbeans
CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-worker
CVE-2022-27340 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-31129 Vulnerability in maven package org.webjars:momentjs
CVE-2021-44521 Vulnerability in maven package org.apache.cassandra:cassandra-all