9.5 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.8%
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.
deepMerge()
github.com/C2FO/comb
nvd.nist.gov/vuln/detail/CVE-2021-23561
snyk.io/vuln/SNYK-JS-COMB-1730083