npm›promisehelpers›CVE-2020-77239.8 CRITICALImproper Input ValidationThe promisehelpers package is vulnerable to Prototype Pollution via the insert function.