Prototype Pollution

deeply is vulnerable to prototype pollution. The vulnerability exists because it does not handle the unsafe keys, like __proto__ , allowing the functionassign-deep to add or modify properties of Object.prototype using a _proto_ payload.