AIKIDO-2025-10838

TL;DR

Affected versions of this package are vulnerable to Prototype Pollution through unsafe object creation where the code dynamically assigns properties without validating keys, allowing an attacker to exploit this by crafting malicious input that sets the __proto__, constructor, or prototype keys to pollute the base object prototype, potentially leading to denial of service, privilege escalation, or remote code execution by modifying inherited properties across the application.