If "Zone" refers to a security boundary (like Solaris Zones or Illumos), there may be technical whitepapers on package isolation from 2021.
: By providing a payload like "__proto__": "isAdmin": true , the attacker attempts to set a global property.