Vulnerability in object-path
There is a prototype pollution vulnerability in object-path that is fixed in 0.11.8. That dependency needs to be updated in graphql-upload. See: https://github.com/mariocasciaro/object-path

