CVE-2021-25953
1 advisory.
npm/putil-merge CVE-2021-25953: critical 9.8
Prototype Pollution in putil-merge
Action: Upgrade putil-merge to 3.7.0 or later.
npm i putil-merge@3.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 3.7.0 | - |
Fixed versions
| 3.7.0 |
Sources
- osv: GHSA-9x7m-9hpg-xxmw
- https://nvd.nist.gov/vuln/detail/CVE-2021-25953
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25953
CVE-2021-25953 · published · modified · JSON