npm/lutils-merge: high 7.3
Prototype Pollution in lutils-merge
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.2.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-f7qw-5pvg-mmwp
- https://github.com/nfour/lutils-merge/issues/1
- https://hackerone.com/reports/439107
- https://snyk.io/vuln/SNYK-JS-LUTILSMERGE-174783
- https://www.npmjs.com/advisories/893
published · modified · JSON