pathval before version 1.1.1 is vulnerable to prototype pollution.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7751.json"