Merge-deep Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Merge-deep Project records in CISA KEV

No Merge-deep Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Merge-deep 2 records MEDIUM

Records

2 records

TI-2021-08386 CVE-2021-26707 · GHSA-r6rj-9ch6-g264

The merge-deep library before 3.0.3 for Node.js can be tricked into overwriting…

MEDIUM 46

The merge-deep library before 3.0.3 for Node.js can be tricked into overwriting properties of Object.prototype or adding new properties to it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01917 Published 2021-06-02 Partial fix · 3.0.3 CWE-1321

TI-2018-02720 CVE-2018-3722 · GHSA-9g9w-hmvj-5h57

merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data…

MEDIUM 42

merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or mod…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02004 Published 2018-06-07 Fixed in 3.0.1 CWE-471

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0