Description
This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge()
Remediation
References
https://snyk.io/vuln/SNYK-JS-MOOTOOLS-1325536
Related Vulnerabilities
CVE-2022-25895 Vulnerability in npm package lite-dev-server
CVE-2022-35923 Vulnerability in npm package v8n
CVE-2021-41183 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery-ui
CVE-2019-9155 Vulnerability in npm package openpgp
CVE-2023-46659 Vulnerability in maven package org.jenkins-ci.plugins:trac