Threats affecting pkg:npm/@progress/kendo-vue-common

A prototype pollution vulnerability exists in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0. This flaw allows a high-privileged attacker who can control a field path processed by components such as the Scheduler to modify the prototype of built-in JavaScript objects. The vulnerability impacts confidentiality, integrity, and availability but with limited severity. The issue is fixed in version 10.0.0.