CVE-2024-38986
1 advisory.
npm/@75lb/deep-merge CVE-2024-38986: medium 5.9
@75lb/deep-merge Prototype Pollution vulnerability
Action: Upgrade @75lb/deep-merge to 1.1.2 or later.
npm i @75lb/deep-merge@1.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.2 | - |
Fixed versions
| 1.1.2 |
Sources
- osv: GHSA-28mc-g557-92m7
- https://nvd.nist.gov/vuln/detail/CVE-2024-38986
- https://github.com/75lb/deep-merge/issues/1
- https://github.com/75lb/deep-merge/commit/a68541fac3c2372f1ca67effad825990ad8046e1
- https://gist.github.com/mestrtee/b20c3aee8bea16e1863933778da6e4cb
- https://github.com/75lb/deep-merge
CVE-2024-38986 · published · modified · JSON