Padloc

Padloc versions 4.0.0 through 4.3.0 are vulnerable to prototype pollution via crafted SCIM PATCH requests, allowing authenticated attackers to modify Object.prototype and disrupt server processes.