Authorization bypass via incomplete path-segment validation

Prototype pollution in Mick Hansen dottie 2.0.4 through 2.0.6 allows attackers to inject inherited properties via crafted paths. set() and transform() inspect only the first path segment for proto, so later occurrences invoke its setter and place attacker-selected values on an intermediate object's prototype. Exploitation requires an application to pass attacker-controlled paths into either API; inherited values can bypass property-based authorization checks or trigger exceptions, but Object.prototype remains unchanged.