Severity: Critical
CVSS Score: 9.8
The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.