2021-07-27

2021-07-28

2021-07-29

All (1) Critical (1) High (2) Medium (3)

CVE-2021-23417 Jul 28, 16:15 CRITICAL POC Act Now

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Prototype Pollution Deepmergefn

NVD GitHub

CVSS 3.1

9.8

EPSS

1.1%