devalue

Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties

devalue affected by CPU and memory amplification from sparse arrays

devalue has prototype pollution in devalue.parse and devalue.unflatten

devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse

devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed

Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse

Cross-Site Scripting in @nuxt/devalue

Malicious code in becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yoursel (npm)

Malicious code in dow-load-becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-whil (npm)