Mongoose Vulnerable to Prototype Pollution in Schema Object
DescriptionMongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.Affected versions of this package are vulnerable to Prototype Pollution. The `Schema.path()` function is vulnerable to prototype pollution when setting the `schema` object. This vulnerability allows modification of the Object prototype and could be manipulated into a Denial of Service (DoS) attack.Proof of ConceptImpactThis vulnerability can be manipulated to exploit other types of attacks, such as Denial of service (DoS), Remote Code Execution, or Property Injection.