Prototype pollution vulnerability left bug bounty platform HackerOne open to attack

First reported on the HackerOne bug bounty platform by security researcher William Bowling, the new prototype pollution vulnerability was found in a JavaScript file used to host content from Wistia.