I'm submitting a bug report

parseQueryString of aurelia path is vulnerable to prototype pollution.

POC
aurelia blog is using parseQueryString to parse location.search, so it is vulnerable to prototype pollution

1. Open the following URL: https://aurelia.io/blog/?__proto__[asdf]=asdf
2. Open Devtools Console, and check the Object.prototype
3. You can notice Object being polluted with the "asdf" property.