CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). The `del()` function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like `toString` on all objects.

object-path es vulnerable a una Modificación Inapropiada de los Atributos del Prototipo del Objeto ("Contaminación de Prototipo")