Prototype Pollution

mongoose is vulnerable to Prototype Pollution. An attacker who has the ability to insert a document is able to inject properties into existing prototypes via the init function of document.js and modify the attributes such as proto and constructor, via the the index parameter, resulting in Prototy...