An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components.
CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')