Security:
- ObjectUtils: Prototype pollution in
mutateFieldData(CVE-2026-15538, GHSA-vg36-rrrg-4wqv) #8553
Field paths containing __proto__, constructor or prototype are now rejected at every level of the path. Reported by @Dremig.
Full Changelog: 10.9.8...10.9.9