Advisory Weakness Curation

Prototype Pollution in mpath Versions of `mpath` before 0.5.1 are vulnerable to prototype pollution. Provided certain input `mpath` can add or modify properties of the `Object` prototype. These properties will be present on all objects. ## Recommendation Update to version `0.5.1` or later.

Injection Vulnerability A prototype pollution vulnerability was found in module mpath that allows an attacker to inject arbitrary properties onto `Object.prototype`.