Description
The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. **Note:** This vulnerability derives from an incomplete fix to [CVE-2019-10792](https://security.snyk.io/vuln/SNYK-JS-BODYMEN-548897)
Remediation
References
https://snyk.io/vuln/SNYK-JS-BODYMEN-2342623
Related Vulnerabilities
CVE-2019-1010266 Vulnerability in maven package org.fujion.webjars:lodash
CVE-2021-41303 Vulnerability in maven package org.apache.shiro:shiro-core
CVE-2013-1942 Vulnerability in npm package jplayer
CVE-2021-29486 Vulnerability in npm package cumulative-distribution-function
CVE-2020-28168 Vulnerability in maven package org.webjars.bowergithub.axios:axios