CVE-2021-3645

9.8

CRITICALCVSS v3

Published

September 10, 2021

CVSS v2

7.5 HIGH

Affected

5 projects

Assigned by

Severity scale

010

Description

merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

NPM(recursive)? merging of (cloned)? objects.

< 1.0.2NVD

GitHub

< 1.0.2NVD

NPM

A set of utils for faster development of GraphQL tools

< 1.0.2NVD

GitHubA tool for merging objects.

< 1.0.2NVD

NPMMerge - like most tools, except also supports arrays

< 1.0.2NVD