4 matches found
CVE-2021-23700
creationtimestamp| type| source ---|---|--- 2021-12-10 22:25:23+00:00| seen| https://t.me/cibsecurity/33763...
9.8CVSS8.7AI score0.01171EPSS
SaveExploits1References1
CVE-2021-23700
All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...
9.8CVSS0.01171EPSS
SaveExploits1References1
CVE-2021-23700
CVE-2021-23700 affects the npm package merge-deep2, with prototype pollution via the mergeDeep() function. All versions are vulnerable to injecting properties into Object.prototype through unsafe recursive merge or path-based property assignment, enabling potential DoS or remote code execution in...
9.8CVSS8AI score0.01171EPSS
SaveExploits1References1Affected Software1
20