Umbraengineering Merge-recursive — known CVE vulnerabilities

Every CVE whose affected-product data names Umbraengineering Merge-recursive, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2018-3751 — CVSS 9.8 (critical): The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object…