HIGH7.5npmGHSA-c497-v8pv-ch6x· CVE-2021-23329, SNYK-JS-NESTEDOBJECTASSIGN-1065977Prototype pollution in nested-object-assignModified: 7/8/2026