Read the docs

Putil-merge Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Putil-merge Project records in CISA KEV

No Putil-merge Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Putil-merge 2 records MEDIUM

Records

2 records

TI-2021-07959 CVE-2021-25953 · GHSA-9x7m-9hpg-xxmw

Prototype pollution in putil-merge

Priority MEDIUM 47

Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02961 Published 2021-07-14 Fixed in 3.7.0 CWE-1321
TI-2021-06146 CVE-2021-23470 · GHSA-4g77-cvgw-grvw

Prototype pollution in putil-merge

Priority MEDIUM 45

This affects the package putil-merge before 3.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01266 Published 2022-02-04 Fixed in 3.8.0 CWE-1321
Open these records in search →