Skip to content
OpenAdvisories

Package · npm

merge-deep2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2021-23700

    Prototype Pollution

    All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.

    merge-deep2 npm