Description
All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | merge-deep2 | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | merge-deep2 | <= 3.0.6 | — | GHSA-j28q-p8ww-cp87 |