CVE-2019-10794

Name of the Vulnerable Software and Affected Versions component-flatten versions all

Description The issue allows the a function to be tricked into adding or modifying properties of Object.prototype using a proto payload, which is a form of Prototype Pollution. This occurs because the function does not properly handle the proto property in the payload.

Recommendations For all versions, consider restricting the use of the a function until a patch is available to prevent potential exploitation. As a temporary workaround, avoid using the proto property in the payload to minimize the risk of Prototype Pollution.