Authenticated prototype pollution via handler key writes

Prototype Pollution in bodymen before 1.1.1 allows remote authenticated users to modify Object.prototype via crafted proto request data. The handler function writes caller-controlled type and name keys into handler tables without rejecting prototype-sensitive keys, allowing properties to be added or changed on Object.prototype. Exploitation requires an authenticated request path that passes attacker-controlled fields to the middleware; the resulting pollution can alter downstream application behavior across confidentiality, integrity, or availability.