Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @ranfdev/deepobj
Prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input.