Description
This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-NEDB-1305279
Related Vulnerabilities
CVE-2020-23622 Vulnerability in maven package org.fourthline.cling:cling-core
CVE-2022-24760 Vulnerability in npm package parse-server
CVE-2020-7733 Vulnerability in maven package org.webjars.bowergithub.faisalman:ua-parser-js
CVE-2019-11002 Vulnerability in npm package materialize-css
CVE-2021-32854 Vulnerability in maven package org.webjars:textangular