TI-2022-08994 CVE-2022-25301 · GHSA-p3pg-64pv-v7jgPrototype pollution in jsgui-lang-essentialsPriority MEDIUM 45All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01236 · Published 2022-05-01 · No fix listed CWE-1321