AIKIDO-2026-10851

TL;DR

objDeepCopy and objCopyProps copy enumerable inherited properties without filtering prototype-pollution keys. Attackers who can supply object data or paths can write through __proto__, constructor, or prototype and modify shared object prototypes. The setter helpers and Object.fromEntries polyfill expose related unsafe write paths. The fix switches copy logic to safe own-key iteration and blocks unsafe keys and targets before committing writes.