Security Advisory
CVE-2021-23397
5.6
MEDIUM
Vulnerability Description
All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.
Published Date
July 25, 2022
Official Source
NIST NVD Advisory