putil-merge@3.6.2 vulnerabilities
Lightweight solution for merging multiple objects into one. Also it supports deep merge and deep clone
-
latest version
3.12.1
-
latest non vulnerable version
-
first published
7 years ago
-
latest version published
7 months ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the putil-merge package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
putil-merge is a Lightweight solution for merging multiple objects into one. Also it supports deep merge. Affected versions of this package are vulnerable to Prototype Pollution. The Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-PUTILMERGE-1317077 How to fix Prototype Pollution? Upgrade |
<3.8.0
|
putil-merge is a Lightweight solution for merging multiple objects into one. Also it supports deep merge. Affected versions of this package are vulnerable to Prototype Pollution. The How to fix Prototype Pollution? Upgrade |
<3.7.0
|