5.6 Medium

CVE-2021-23397 All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function

Description

All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.

Affected products and versions

Product	Affected versions	Fixed in
@ianwalter/merge	Versions not published

Do you use @ianwalter/merge?

Track this CVE Watch @ianwalter/merge Check my SBOMs

www.cveye.io/en/cve/CVE-2021-23397

Timeline

Published July 25, 2022
Last modified September 16, 2024

References

security.snyk.io security.snyk.io

Track this CVE