extend2 安全漏洞

extend2 is a simple function for extending objects. Derived from node-extend, the difference is that deep cloning overwrites the array with the original array. extend2 suffers from a security vulnerability that stems from an unsafe recursive merge...

20190403-utils (=1.0.0), @alex_xu/xdb (=0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (=1.0.0)

extend2 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils =1.0.0 - @alexxu/xdb =0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...