CVE-2026-35209: CVE-2026-35209: Prototype Pollution in unjs/defu via Object.assign

📰 Dev.to · CVE Reports

CVE-2026-35209: Prototype Pollution in unjs/defu via Object.assign Vulnerability ID:...

Published 6 Apr 2026