Prototype Pollution is a JavaScript-specific vulnerability where an attacker modifies Object.prototype via __proto__ or constructor.prototype, affecting all objects in the application.
Can lead to XSS, authorisation bypass, or RCE (Node.js).
JSON.parse('{"__proto__":{"admin":true}}')