CVE-2023-26113

CVE-2023-26113 describes a Prototype Pollution vulnerability in versions of the collection.js package prior to 6.8.1, specifically affecting the extend function. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to remotely achieve a denial-of-service condition with low attack complexity. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, organizations using affected versions should prioritize patching to mitigate this risk.