GitHub Advisoryadvisory · npm

GHSA-992f-wf4w-x36v Prototype Pollution in merge-objects

LOW Published 2020-09-01 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
merge-objects
Severity
Low
Weaknesses
CWE-1321
Reviewed
2020-08-31

Affected packages

• npm merge-objects: >= 0.0.0 (no fix yet)

Description

All versions of `merge-objects` are vulnerable to Prototype Pollution. Recommendation No fix is available for this vulnerability at this time. It is our recommendation to use an alternative package.

Related

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References