CVE-2019-10794

CVE-2019-10794 describes a Prototype Pollution vulnerability in all versions of the component-flatten library. An attacker could manipulate the 'a' function to add or modify properties of Object.prototype, leading to potential data manipulation, information disclosure, or denial of service. With a CVSS score of 6.3 (MEDIUM), this vulnerability is remotely exploitable with low privileges and no user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.