Skip to content
OpenAdvisories

Package · npm

lutils-merge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    GHSA-f7qw-5pvg-mmwp

    Prototype Pollution in lutils-merge

    All versions of `lutils-merge` are vulnerable to Prototype Pollution. The merge() function fails to prevent user input to alter an Object's prototype, allowing attackers to modify override properties of all objects in the application. This may lead to Denial …

    lutils-merge npm