Description
All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.
Remediation
References
https://github.com/jesusgm/deepmergefn/blob/master/index.js%23L6
https://snyk.io/vuln/SNYK-JS-DEEPMERGEFN-1310984
Related Vulnerabilities
CVE-2019-3580 Vulnerability in maven package org.openrefine:openrefine
CVE-2022-24847 Vulnerability in maven package org.geoserver:gs-main
CVE-2020-10719 Vulnerability in maven package io.undertow:undertow-core
CVE-2023-25572 Vulnerability in maven package org.webjars.npm:ra-ui-materialui
CVE-2022-2596 Vulnerability in maven package org.webjars.npm:node-fetch