~ / search / GHSA-vj72-mwrj-m2xq

GHSA-vj72-mwrj-m2xq

Prototype Pollution in deepmergefn

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23417

Packages

EcosystemPackageAffectedFixed in
npm deepmergefn <= 1.1.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

References

External links from the advisory. They lead to third-party sites.