CVE-2020-28499 All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge

Description

All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .

Affected products and versions

Product	Affected versions	Fixed in
merge	Versions not published