Description
This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge()
Remediation
References
https://snyk.io/vuln/SNYK-JS-MOOTOOLS-1325536
Related Vulnerabilities
CVE-2017-16096 Vulnerability in npm package serveryaozeyan
CVE-2020-15095 Vulnerability in maven package org.webjars.bower:npm
CVE-2022-0086 Vulnerability in npm package uppy
CVE-2011-2087 Vulnerability in maven package org.apache.struts:struts2-javatemplates-plugin
CVE-2016-10735 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap-sass