Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2021-23397 All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/me… Merge No fix yet Fix from $2,3002022-07-25 CRITICAL 9.8 CVE-2021-3645 merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Merge 1.0.2+ Fix from $2,3002021-09-10 CRITICAL 9.8 CVE-2020-28499 All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge . Merge 2.1.1+ Fix from $2,3002021-02-18 HIGH 7.5 CVE-2018-16469 The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties… Merge 1.2.1+ Fix from $1,9502018-10-30