Advisories for Npm/Decal package

decal is vulnerable to prototype pollution in the set function.

decal is is vulnerable to prototype pollution in the extend function.