Summary

Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server.
Prototype pollution vulnerability introduced through [email protected] , severity = High
Remediation: using a newer protobufjs than [email protected] and [email protected]

Details

Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer.

PoC

Complete instructions, including specific configuration details, to reproduce the vulnerability.
run: npm ls protobufjs , upgrading the protobufjs version through package-lock.json will eliminate the problem i guess

Impact

What kind of vulnerability is it? Who is impacted?
Affected versions of this package are vulnerable to Prototype Pollution. A user-controlled protobuf message can be used by an attacker to pollute the prototype of Object.prototype by adding and overwriting its data and functions.