CVE-2021-23452

CVE-2021-23452 is a critical prototype pollution vulnerability affecting all versions of the 'x-assign' package. An unauthenticated attacker can remotely exploit this flaw with low complexity by manipulating the global proto object, leading to complete compromise of confidentiality, integrity, and availability. Despite its critical CVSS score of 9.8, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.