Prototype Pollution

pathval is vulnerable to prototype pollution. The function parsePath allows an attacker to get control of value of “path” and modify attributes such as proto, constructor and prototype...