Prototype Pollution

2022-07-2608:07:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.8%

JSON

ianwalter/merge is vulnerable to prototype pollution. The vulnerability exist in the merge function in merge.js which allows remote attackers to inject malicious payloads.

CPENameOperatorVersion
@ianwalter/mergele9.0.1
@ianwalter/mergele9.0.1

CPE	Name	Operator	Version
	@ianwalter/merge	le	9.0.1
	@ianwalter/merge	le	9.0.1

References

github.com/advisories/GHSA-42m6-g935-5vmq

0.003 Low

EPSS

Percentile

68.8%

JSON

Related for VERACODE:36508