Advisories for Npm/Node.extend package

A prototype pollution vulnerability in node.extend allows an attacker to inject arbitrary properties onto Object.prototype.