CVE-2020-28499
All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .
Original description
The description as published by the source.
All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory snyk.io
- advisory snyk.io
- advisory vuldb.com
- web github.com