@Graphql-Tools/Utils (>= 10.10.1, <= 12.0.1)

A prototype pollution vulnerability in @graphql-tools/utils allows an attacker to inject arbitrary properties into Object.prototype via unvalidated path segments in incremental GraphQL responses.