@graphql-tools/merge

@graphql-tools/merge

Releases1.49K

Frequency1 day 12 hours

Last Release6 days ago

A set of utils for faster development of GraphQL tools

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-23397NVD↗	all versions	Jul 25, 2022Monday, 25 July 2022, 14:15	5.6 MEDIUM	—
All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.
CVE-2021-3645NVD↗	< 1.0.2	Sep 10, 2021Friday, 10 September 2021, 11:15	9.8 CRITICAL	7.5 HIGH
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28499NVD↗	< 2.1.1	Feb 18, 2021Thursday, 18 February 2021, 16:15	7.3 HIGH	7.5 HIGH
All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .