CVE-2021-32736: 
JavaScript vulnerability analysis and mitigation

A vulnerability was discovered in the think-helper npm package affecting versions prior to 1.1.3. The vulnerability (CVE-2021-32736) is related to Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype Pollution. The issue was disclosed on June 30, 2021 (GitHub Advisory).

The vulnerability occurs when the software receives input from an upstream component that specifies attributes to be initialized or updated in an object, but fails to properly control modifications of attributes of the object prototype. This is classified as CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes) (GitHub Advisory).

The vulnerability has been rated as High severity. A successful exploitation could allow an attacker to modify object prototype attributes, potentially leading to application security bypasses or other unexpected behavior (GitHub Advisory).

Users should upgrade to think-helper version 1.1.3 or later which contains the fix for this vulnerability. No other workarounds have been provided (GitHub Advisory).