Object prototype modification via unsafe pointer tokens

Prototype pollution in APIDevTools JSON Schema $Ref Parser 15.3.0 through 15.3.5 allows remote authenticated users to modify Object.prototype. The $Refs.set and Pointer.set path walks attacker-controlled JSON Pointer tokens and performs nested assignments without rejecting proto, constructor, or prototype, allowing writes to inherited prototype objects. Reachability requires a consuming application to pass an attacker-controlled pointer and value into the public setter; resulting logic corruption, service interruption, or further application-specific impact depends on how polluted properties are used.