Denial of Service (DoS) via the unsetByPath function in jsjoints

The package jointjs before 3.3.0 are vulnerable to Denial of Service DoS via the unsetByPath function...