Skip to content
OpenAdvisories

Package · npm

merge-change

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.6
    CVE-2021-23421

    Prototype Pollution

    All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.

    merge-change npm