Severity: Critical
CVSS Score: 6.5
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.