Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
All versions of the package progressbar.js is vulnerable to Prototype Pollution via the function extend() in the file utils.js.
All versions of the package progressbar.js is vulnerable to Prototype Pollution via the function extend() in the file utils.js.