PT-2026-67473

Impact What kind of vulnerability is it? Who is impacted? Prototype pollution in update casting: passing a user-controlled update to a Mongoose update, like MyModel.updateOnefilter, req.body, can cause Mongoose to set $fullPath and $parentSchemaDocArray on Object.prototype. Example: javascript...