Merge Project Merge
4 CVEs affecting Merge Project Merge. Latest disclosed: 2022-07-25. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3645 | Critical | 9.8 | 2021-09-10 | merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2018-16469 | High | 7.5 | 2018-10-30 | The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be p… |
CVE-2020-28499 | High | 7.3 | 2021-02-18 | All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge . |
CVE-2021-23397 | Medium | 5.6 | 2022-07-25 | All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger inste… |