Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.
{ "github_reviewed": true, "cwe_ids": [ "CWE-1321" ], "severity": "CRITICAL", "github_reviewed_at": "2022-09-21T21:07:43Z", "nvd_published_at": "2022-09-15T16:15:00Z" }