CWE-79

• JavaScript Security: Prototype Pollution to Supply Chain Attacks Nov 22
• XSS Is Not Just a JavaScript Problem Feb 1