CVE-2021-23403

CVE-2021-23403 is a critical prototype pollution vulnerability affecting all versions of the ts-nodash package, stemming from insufficient input validation within its Merge() function. This flaw carries a CVSS score of 9.8, indicating a severe risk where an unauthenticated attacker can remotely achieve full compromise of confidentiality, integrity, and availability with low attack complexity. Despite its critical severity, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.