Skip to content
OpenAdvisories

Package · npm

@theecryptochad/merge-guard

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-mhwj-73qx-jqxm

    @theecryptochad/merge-guard has Prototype Pollution in its deepMerge() function

    ## Summary `@theecryptochad/merge-guard` versions prior to 1.0.1 are vulnerable to Prototype Pollution via the `deepMerge()` function. An attacker who controls the source object can inject `__proto__` keys that mutate `Object.prototype`, affecting all objects…

    @theecryptochad/merge-guard npm