@75lb/deep-merge

@75lb/deep-merge

NPMNPM
NPMwww.npmjs.com
GitHubgithub.com
Releases6
Frequency11 months 3 weeks
Last Release
Deep-merge the values of one object structure into another
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2024-38986NVD↗
= 1.1.19.8 CRITICAL—

Prototype Pollution in 75lb deep-merge 1.1.1 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via merge methods of lodash to merge objects.