The package min-dash prior to 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types.
camunda min-dash