high8.8
CVE-2018-3722
Prototype Pollution in merge-deep
Impact
Versions of `merge-deep` before 3.0.1 are vulnerable to prototype pollution via merging functions. ## Recommendation Update to version 3.0.1 or later.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | merge-deep | < 3.0.1 | 3.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Merge-Deep Project | Merge-Deep | before 3.0.1 |