Description
All versions of merge-options are vulnerable to Prototype Pollution
Recommendation
Update the merge-options package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.0.1
- Patched version(s): 1.0.1
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in merge-options and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution in async merge-object - CVE-2018-3753
- Prototype Pollution in the merge and clone helper methods - CVE-2021-39227
- Prototype Pollution in merge-change - CVE-2021-23421
- Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy - CVE-2026-42041
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023


