Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The merge-deep library before 3.0.3 for Node.js can be tricked into overwriting properties of Object.prototype or adding new properties to it. These properties are then inherited by every object in the program, thus facilitating prototype-pollution attacks against applications using this library.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
merge-deep 安全漏洞
Vulnerability Description
merge-deep是开源的一个工具。用于递归合并 JavaScript 对象中的值。 merge-deep 3.0.3之前存在安全漏洞，该漏洞源于merge-deep库可能会被欺骗到覆盖Object的属性，merge-deep库可能会被欺骗到覆盖Object的属性。、
CVSS Information
N/A
Vulnerability Type
N/A