Improper Input Validation
The path package is vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
Advisories for Npm/Irrelon-Path package
2020
The path package is vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.