Security: unjs/defu
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Prototype pollution via `__proto__` key in defaults argumentGHSA-737v-mqg7-c878 published
Apr 2, 2026 by pi0High
Learn more about advisories related to unjs/defu in the GitHub Advisory Database