CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2021/05/04 8:18 p.m.•144 views

Prototype Pollution in merge

All versions of package merge 2.1.1 are vulnerable to Prototype Pollution via recursiveMerge...

9.8CVSS8.9AI score0.01443EPSS

SaveExploits0References8Affected Software1

NVD•added 2021/02/18 4:15 p.m.•20 views

CVE-2020-28499

All versions of package merge are vulnerable to Prototype Pollution via recursiveMerge...

9.8CVSS0.01443EPSS

SaveExploits0References4

CVE•added 2021/02/18 4:05 p.m.•83 views

CVE-2020-28499

CVE-2020-28499 affects the Node.js merge package. The vulnerability is a prototype pollution weakness in the _recursiveMerge function that exists in all versions before 2.1.1. Exploitation could allow an attacker to modify object prototypes, potentially leading to arbitrary code execution or mani...

9.8CVSS8.3AI score0.01443EPSS

SaveExploits0References4Affected Software1

Rapid7 Vulnerability Database (full)•added 2021/02/18 12:00 a.m.•2 views

CVE-2020-28499: Undefined Security Weakness

All versions of package merge are vulnerable to Prototype Pollution via recursiveMerge...

9.8CVSS5.7AI score0.01443EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by