CVE-2026-63402

A flaw was found in i18next. When an application merges translation resources with deep merging and overwriting enabled, the internal merge utility improperly processes inherited built-in functions. A remote attacker can exploit this issue by supplying specially crafted resource data to overwrite...

EUVD-2022-1823

Malicious code in bioql PyPI...

merge-change package security vulnerability

merge-change is an open source simple library for deep merging of objects and other types, also for patching and immutable new. The merge-change package has a security vulnerability that makes the package susceptible to prototype contamination via the utils.set function...

Node.js third-party modules: [plain-object-merge] Prototype pollution

I would like to report a prototype pollution vulnerability in plain-object-merge module. It allows an attacker to inject properties on Object.prototype. Module module name: plain-object-merge version: 1.0.1 npm page: https://www.npmjs.com/package/plain-object-merge Module Description Extremely fa...