Merge Security Vulnerabilities and Issues — Merge CVE List

Lucene search

Merge ProjectMerge

4 matches found

CVE•added 2022/07/25 2:15 p.m.•94 views

CVE-2021-23397

All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.

9.8CVSS7.5AI score0.00216EPSS

CVE•added 2021/02/18 4:15 p.m.•53 views

CVE-2020-28499

All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .

9.8CVSS8.3AI score0.00541EPSS

CVE•added 2018/10/30 9:29 p.m.•52 views

CVE-2018-16469

The merge.recursive function in the merge package

7.5CVSS7.3AI score0.00408EPSS

CVE•added 2021/09/10 11:15 a.m.•42 views

CVE-2021-3645

merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

9.8CVSS8AI score0.00453EPSS