system
Describe <CVE-2019-10747>.
user
What is <CVE-2019-10747>?
assistant
set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and _proto_ payloads..