Versions of mpath before 0.5.1 are vulnerable to prototype pollution. Provided certain input mpath can add or modify properties of the Object prototype. These properties will be present on all objects.
mpath
Object
Update to version 0.5.1 or later.
0.5.1
Versions of
mpathbefore 0.5.1 are vulnerable to prototype pollution. Provided certain inputmpathcan add or modify properties of theObjectprototype. These properties will be present on all objects.Recommendation
Update to version
0.5.1or later.References