flat-to-nested

flat-to-nested convert() prototype pollution via __proto__ keys

The `convert()` function uses plain objects for temporary lookup tables, allowing prototype pollution via `__proto__` keys.