npm/deepmergefn CVE-2021-23417: medium 5.6, EPSS 1.08%

Prototype Pollution in deepmergefn

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-vj72-mwrj-m2xq
• https://nvd.nist.gov/vuln/detail/CVE-2021-23417
• https://github.com/jesusgm/deepmergefn
• https://github.com/jesusgm/deepmergefn/blob/master/index.js#23L6
• https://snyk.io/vuln/SNYK-JS-DEEPMERGEFN-1310984

CVE-2021-23417 · published 2021-08-10T16:09:25Z · modified 2023-11-08T04:05:08.435536Z · JSON