Skip to content
OpenAdvisories

Package · npm

upmerge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-gm9g-2g8v-fvxj

    Prototype Pollution in upmerge

    All versions of `upmerge` are vulnerable to Prototype Pollution. The merge() function fails to prevent user input to alter an Object's prototype, allowing attackers to modify override properties of all objects in the application. This may lead to Denial of Se…

    upmerge npm