CVE-2021-23397

5.6

MEDIUMCVSS v3

Published

July 25, 2022

Affected

5 projects

Assigned by

[email protected]

Severity scale

010

Description

All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.

merge

NPM(recursive)? merging of (cloned)? objects.

all versionsNVD

swordev/merge

GitHub

all versionsNVD

@graphql-tools/merge

NPM

More on this CVE

NVD↗GitHub Advisory↗

A set of utils for faster development of GraphQL tools

all versionsNVD

fizker/merge

GitHubA tool for merging objects.

all versionsNVD

@remy/merge

NPMMerge - like most tools, except also supports arrays

all versionsNVD

Security Advisories

CVE-2021-23397

Description

More on this CVE