Node.js applications open to prototype pollution attacks via legacy function in popular encryption library

A carryover function in the node-forge JavaScript library contains a flaw that could allow attackers to carry out prototype pollution attacks against applications, according to an advisory on GitHub.