Prototype pollution is a vulnerability where an attacker is able to modify
Object.prototype. Because nearly all objects in JavaScript are instances of
Object, a typical object inherits properties (including methods) from
Object.prototype. Changing Object.prototype can result in a wide range of
issues, sometimes even resulting in remote code execution.

The most common way to cause prototype pollution is to use an unsafe merge or
extend function to recursively copy properties from an untrusted source object.

Note: I have found this vulnerability in the latest version of product.

Refer: https://www.acunetix.com/vulnerabilities/web/prototype-pollution/