In some specific scenarios an attacker can perform prototype manipulation without being able to inject arbitrary code, in this jquery bug you can see one such c

In some specific scenarios an attacker can perform prototype manipulation without being able to inject arbitrary code, in this jquery bug you can see one such case due faulty parsing of a json object (json that may come from untrusted sources) https://snyk.io/blog/after-three-years-of-silence-a-new-jquery-prototype-pollution-vulnerability-emerges-once-again/ https://snyk.io/blog/after-three-years-of-silence-a-new-jque...