Skip to content
OpenAdvisories

Package · npm

@75lb/deep-merge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-38986

    @75lb/deep-merge Prototype Pollution vulnerability

    Prototype Pollution in 75lb deep-merge 1.1.1 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via merge methods of lodash to merge objects.

    @75lb/deep-merge npm