AIKIDO-2025-10107

TL;DR

Affected versions of this package are affected by improper validation of object prototypes when creating or setting properties that can allow user-controlled inputs to directly impact the __proto__, leading to unexpected behaviors. An attacker can pass a crafted payload to modify the global object prototype, enabling potential bypasses in security checks and privilege escalation, depending on the application's logic.