TI-2018-02747 CVE-2018-3751 · GHSA-cvxm-f295-x957The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be…Priority MEDIUM 45The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01428 · Published 2018-07-03 · No fix listed CWE-20
