Patchmerge Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Patchmerge Project records in CISA KEV

No Patchmerge Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Patchmerge 1 record HIGH

Records

1 record

TI-2021-07926 CVE-2021-25916 · GHSA-84g3-cv89-m9gm

Prototype pollution in patchmerge

HIGH 82

Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03507 Published 2021-03-16 Fixed in 1.0.2 CWE-1321

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0