Vulnerabilities (CVE)

Filtered by vendor Merge-change Project Subscribe
Filtered by product Merge-change
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23421 1 Merge-change Project 1 Merge-change 2023-12-10 7.5 HIGH 9.8 CRITICAL
All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.