Merge-deep2 Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Merge-deep2 Project records in CISA KEV

No Merge-deep2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2021-06181 CVE-2021-23700 · GHSA-j28q-p8ww-cp87

MEDIUM 44

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0121 Published 2021-12-10 No fix listed CWE-1321