basic-read-config (>=1.0.2, <=1.0.3), blockchain-profile (>=0.1.0, <=0.3.2) +8 more potentially affected by unknown CVE via merge-objects (1.0.5)

merge-objects NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on merge-objects and may be impacted: - basic-read-config =1.0.2, =0.1.0, =0.0.5, =0.3.0, =0.0.1, =1.1.4, =1.4.0, =0.1.0, =0.0.1, =0.5.3 Source cves: unknown CVE Source...