Improperly Controlled Modification of Dynamically-Determined Object Attributes
The parse function could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload.
Advisories for Npm/Open-Graph package
2021