Unauthenticated service interruption via prototype-polluting merge

Prototype pollution in apidoc-core 0.15.0 and earlier allows remote attackers to interrupt documentation generation via crafted input. The preProcess function in lib/workers/api_body_title merges crafted define data into internal objects without blocking prototype-modifying keys, assigning attacker-controlled properties to Object.prototype. No privileges or user interaction are required when a consuming application exposes attacker-controlled documentation input; the documented consequence is a service interruption.