CVE-2020-28499

Published February 18th, 2021

View on NVD ↗

CVSS v3

7.3

HIGH

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .

GitHub

175