Product
The @rvf/set-get library prior to version 7.0.4 is vulnerable to prototype pollution, allowing unauthenticated attackers to trigger a process-wide denial of service via malicious form field submissions.