Description
All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.
Remediation
References
https://github.com/jesusgm/deepmergefn/blob/master/index.js%23L6
https://snyk.io/vuln/SNYK-JS-DEEPMERGEFN-1310984
Related Vulnerabilities
CVE-2020-28464 Vulnerability in npm package djv
CVE-2019-17570 Vulnerability in maven package org.apache.xmlrpc:xmlrpc
CVE-2024-36401 Vulnerability in maven package org.geoserver.web:gs-web-app
CVE-2023-46651 Vulnerability in maven package io.jenkins.plugins:warnings-ng
CVE-2020-11057 Vulnerability in maven package org.xwiki.platform:xwiki-platform-dashboard-macro