Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2021-23397

Prototype Pollution

Description

All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a @ianwalter/merge

  • 0 to < unspecifiedaffected

References