Description
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381
Related Vulnerabilities
CVE-2023-33510 Vulnerability in maven package org.jeecgframework.p3:jeecg-p3-biz-chat
CVE-2018-3728 Vulnerability in maven package org.webjars.npm:hoek
CVE-2022-25854 Vulnerability in npm package @yaireo/tagify
CVE-2023-45669 Vulnerability in maven package com.webauthn4j:webauthn4j-spring-security-core