npm›dot-notes›CVE-2020-77179.8 CRITICALImproper Input ValidationThe dot-notes package is vulnerable to Prototype Pollution via the create function.