CVE-2026-48795: Adonisjs Bodyparser Prototype Pollution Plain Objectcve-2026-48795-adonisjs-bodyparser-prototype-pollution-plain-object
Class field initialized as a plain object literal ({}) inherits from Object.prototype and is vulnerable to prototype pollution when modified with path-setting utilities like lodash.set. Use Object.create(null) to create a prototype-less object.