AIKIDO-2026-10530

TL;DR

Affected versions of this package contain a prototype pollution flaw in GraphQL instrumentation where a crafted query using __proto__ as a field name can mutate Object.prototype through resolver-span tracking, and may also trigger tracing/serialisation failures that disrupt normal execution. An attacker able to send malicious GraphQL queries could exploit this by injecting __proto__ fields to poison shared object state across the process, causing unpredictable behavior, application errors, or denial of service through instrumentation crashes and trace submission failures.