CVE-2022-21803

CVE-2022-21803 is a Prototype Pollution vulnerability affecting the nconf package before version 0.11.4. Specifically, the .set() function, when using the memory engine, can be exploited by providing a crafted property to modify Object.prototype. This vulnerability has a CVSS score of 7.5 (HIGH), indicating it can be exploited remotely with low attack complexity and no user interaction, potentially leading to high integrity impact. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.