CveMateVulnerability intelligence

Merge Project vulnerabilities

3 vulnerabilities

Known vulnerabilities in Merge Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Merge3 vulnerabilities

CVE-2018-16469ubuntunode-merge+37y ago30-10-2018 21:00

The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.CVE-2021-3645merge_projectmerge+25y ago10-09-2021 11:04

merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')CVE-2020-28499merge_projectmerge+15y ago18-02-2021 16:05

All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .