Prototype pollution bug in popular Node.js library leaves web apps open to DoS, remote shell attacks

A flaw in the express-fileupload library allows hackers to stage prototype pollution attacks on Node.js servers, a security researcher has discovered.