Closed lscoder closed 2 years ago
See #436 - this CVE is INVALID. It is not a vulnerability, whatsoever.
In the future, please do not submit an unsolicited PR until you're sure the maintainer wants it. This PR's git ref is now permanent pollution on my repo.
This is a fix for CVE-2021-44907. Any property from source object that already exists in
Array.prototype
is ignored.