Node.js applications open to prototype pollution attacks via legacy function in popular encryption library
A carryover purpose in the node-forge JavaScript library consists of a flaw that could enable attackers to have out prototype pollution attacks in opposition to purposes, according to an advisory on GitHub.