CVE-2024-39008: Javascript Prototype Pollution Recursive Deep Mergecve-2024-39008-javascript-prototype-pollution-recursive-deep-merge
Recursive deep-merge iterates source-object keys with `for...in` and assigns to `base[key]` by recursing into `base[key]` itself (`base[key] = merge(base[key], value)`) without filtering the dangerous keys `__proto__`, `constructor`, or `prototype`. If any source object is derived from attacker-controlled input (e.g., JSON.parse of a request body), reading `
