CVE-2021-23760

CVE-2021-23760 is a critical prototype pollution vulnerability affecting the keyget package (version 0.0.0), stemming from an incomplete fix for CVE-2020-28272. This flaw allows an unauthenticated attacker to cause a denial of service and potentially achieve remote code execution through the set, push, and at methods. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.