Prototype pollution vulnerability in ‘predefine’ versions 0.0.0 through 0.1.2 allows an attacker to cause a denial of service and may lead to remote code execution.
References
https://nvd.nist.gov/vuln/detail/CVE-2020-28280
https://github.com/bigpipe/…