Lucene search
AnonymousNODEJS:1666HistoryMay 04, 2021 - 8:21 p.m.
Prototype Pollution
2021-05-0420:21:00
Anonymous
www.npmjs.com
40
merge
vulnerable
prototype pollution
upgrade
version 2.1.1
recursivemerge
nvd
github advisory
software
EPSS
0.004
Percentile
72.2%
Overview
Versions of merge before 2.1.1 are vulnerable to Prototype Pollution via _recursiveMerge .
Recommendation
Upgrade to version 2.1.1 or later
References
Related
osv
osv
Prototype Pollution in merge
2021-05-04 20:18:47
CVE-2020-28499
2021-02-18 16:15:13
veracode
veracode
Prototype Pollution
2021-02-19 02:55:24
nvd
nvd
CVE-2020-28499
2021-02-18 16:15:13
huntr
huntr
Prototype Pollution in yeikos/js.merge
2020-09-23 00:00:00
cvelist
cvelist
CVE-2020-28499 Prototype Pollution
2021-02-18 16:05:19
prion
prion
Design/Logic Flaw
2021-02-18 16:15:00
cve
cve
CVE-2020-28499
2021-02-18 16:15:13
github
github
Prototype Pollution in merge
2021-05-04 20:18:47
