Known vulnerabilities in deep-merge

Vendor: 75lb
Software: deep-merge
Software CPE: cpe:2.3:a:75lb:deep-merge:*:*:*:*:*:*:*:*
Website: https://github.com/75lb
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting deep-merge deep-merge is affected by 1 known vulnerabilities: 1 critical Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105895 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38986		 CWE-1321 Critical
No
No
 1.1.2 20.03.2025 SB2025032025
SB2025032026