75lb/deep-merge

Releases6

Frequency11 months 3 weeks

Last Release2 months ago

Stars2

Deep merge config objects

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2024-38986NVD↗	= 1.1.1	Jul 30, 2024Tuesday, 30 July 2024, 20:15	9.8 CRITICAL	—
Prototype Pollution in 75lb deep-merge 1.1.1 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via merge methods of lodash to merge objects.