Stalniy @casl/ability vulnerabilities

• stalniy @casl/ability @casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath CVE-2026-111172 6.0 MediumOctober 15, 2026