CVE-2021-23700

creationtimestamp| type| source ---|---|--- 2021-12-10 22:25:23+00:00| seen| https://t.me/cibsecurity/33763...

CVE-2021-23700

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...

CVE-2021-23700 Prototype Pollution

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...

CVE-2021-23700

CVE-2021-23700 affects the npm package merge-deep2, with prototype pollution via the mergeDeep() function. All versions are vulnerable to injecting properties into Object.prototype through unsafe recursive merge or path-based property assignment, enabling potential DoS or remote code execution in...

react-here-map-interactive (>=0.0.1 <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (=3.0.6)

merge-deep2 NPM version =3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: SNYK:JS-MERGEDEEP2-1727593...