Open Source & Security

There is a GitHub user (LLM?) that is reporting a lot of &ldquo;securityvulnerabilities&rdquo; as open issues. They are mostly trash reports (e.g. &ldquo;if you pass Object.prototype to thesetFooOnObject function, it will set Object.prototype.foo so that&rsquo;s prototypepollution&rdquo;), but what if one is real? Spicy take up front: let the security vulnerabilities be legitimate and postedout in…