Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
All versions of package js-data is vulnerable to Prototype Pollution via the deepFillIn and the set functions.
Advisories for Npm/Js-Data package
2021
2020
Improper Input Validation
js-data is vulnerable to Prototype Pollution via the deepFillIn function.