CVE-2021-23470
1 advisory.
npm/putil-merge CVE-2021-23470: high 8.2
Prototype Pollution in putil-merge
Action: Upgrade putil-merge to 3.8.0 or later.
npm i putil-merge@3.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.8.0 | - |
Fixed versions
| 3.8.0 |
Sources
- osv: GHSA-4g77-cvgw-grvw
- https://nvd.nist.gov/vuln/detail/CVE-2021-23470
- https://github.com/panates/putil-merge/commit/476d00078dfb2827d7c9ee0f2392c81b864f7bc5
- https://github.com/panates/putil-merge
- https://snyk.io/vuln/SNYK-JS-PUTILMERGE-2391487
CVE-2021-23470 · published · modified · JSON