0.001 Low
EPSS
Percentile
43.6%
Versions of merge-deep before 3.0.1 are vulnerable to prototype pollution via merging functions.
merge-deep
Update to version 3.0.1 or later.
github.com/advisories/GHSA-9g9w-hmvj-5h57
github.com/jonschlinkert/merge-deep/commit/2c33634da7129a5aefcc262d2fec2e72224404e5
hackerone.com/reports/310708
nvd.nist.gov/vuln/detail/CVE-2018-3722
www.npmjs.com/advisories/580