CVE-2023-26105 (published )
All versions of the package utilities are vulnerable to Prototype Pollution via the _mix function.