Merge-object Project Merge-object — known CVE vulnerabilities

Every CVE whose affected-product data names Merge-object Project Merge-object, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2018-3753 — CVSS 9.8 (critical): The utilities function in all versions <= 1.0.0 of the merge-objects node module can be tricked into modifying the prototype of Object when…