The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.
- https://snyk.io/vuln/SNYK-JS-LINUXCMDLINE-598674
- https://github.com/Live-Hack-CVE/CVE-2020-7704