prototype pollution vulnerability in parse git config