Sensitive-data exposure via expandKeys prototype pollution

Prototype pollution in parse-git-config 3.0.0 and earlier allows remote attackers to expose sensitive data through crafted configuration keys. The expandKeys function accepts an attacker-controlled proto key and property segment, then writes that property into the global object prototype without rejecting prototype names. Exploitation requires a consuming application to pass attacker-controlled configuration data to expandKeys; the demonstrated result is cross-object property injection, while further impact depends on how polluted properties are used.