AI Score
Confidence
Low
EPSS
Percentile
72.2%
All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .
github.com/yeikos/js.merge/blob/master/src/index.ts%23L64
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1071049
snyk.io/vuln/SNYK-JS-MERGE-1042987
vuldb.com/?id.170146