Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23397

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-42m6-g935-5vmq

@ianwalter/merge Prototype Pollution via `merge` function All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (`merge`) function. @ianwalter/merge is deprecated https://github.com/ianwalter/merge/blob/master/README.md and the maintainer suggests using @generates/merger https://github.com/generates/generates/tree/main/packages/merger instead.

gitlab/npm/@ianwalter/merge/CVE-2021-23397

Prototype pollution in @ianwalter/merge All versions of package @ianwalter/merge is vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.

gitlab/npm/merge/CVE-2021-23397

This advisory has been marked as a False Positive and has been removed.