Skip to content
OpenAdvisories

Package · npm

putil-merge

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2021-23470

    Prototype Pollution

    This affects the package putil-merge before 3.8.0. The merge() function does not check the values passed into the argument. An attacker can supply a malicious value by adjusting the value to include the constructor property. Note: This vulnerability derives f…

    putil-merge npm
  • Critical 9.8
    CVE-2021-25953

    Prototype Pollution in putil-merge

    Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution.

    putil-merge npm