Convict has Prototype Pollution via startsWith() function
Critical severity
GitHub Reviewed
Published
Mar 24, 2026
in
mozilla/node-convict
•
Updated Mar 26, 2026
Give feedback on Dependabot alerts