Advisories for Npm/Set-In package

The package set-in before 2.0.3 is vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273

Prototype pollution vulnerability in 'set-in' allows attacker to cause a denial of service and may lead to remote code execution.