CVE-2021-23561

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.

Source: CVE-2021-23561