CVE-2021-23329

CVE-2021-23329 is a high-severity Prototype Pollution vulnerability affecting versions of the nested-object-assign package prior to 1.0.4. This flaw allows an unauthenticated attacker to inject arbitrary properties into an object prototype, potentially leading to denial of service. While no active exploitation or public exploit code has been identified, and community discussion is minimal, the vulnerability's nature warrants attention due to its potential impact.