deep-merge vulnerabilities

1 known vulnerability in deep-merge from 75lb. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  deep-merge: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-38986Jul 30, 202475lb

  Prototype Pollution in 75lb deep-merge 1.1.1 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via merge methods of lodash to merge objects.