EUVD-2021-2536

Malware in sbrugna...

GHSA-J28Q-P8WW-CP87 Prototype Pollution in merge-deep2.

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...

react-here-map-interactive (>=0.0.1, <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (3.0.6)

merge-deep2 NPM version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: OSV:GHSA-J28Q-P8WW-CP87...

Prototype Pollution in merge-deep2.

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...

Prototype Pollution

merge-deep2 is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes via merge function...

Design/Logic Flaw

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...

CVE-2021-23700

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep function...

react-here-map-interactive (>=0.0.1, <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (3.0.6)

merge-deep2 NPM version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: SNYK:JS-MERGEDEEP2-1727593...