Description
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.
Remediation
References
https://snyk.io/vuln/SNYK-JS-COMB-1730083
Related Vulnerabilities
CVE-2017-18924 Vulnerability in npm package oauth2-server
CVE-2023-0842 Vulnerability in maven package org.webjars.npm:xml2js
CVE-2022-38752 Vulnerability in maven package org.yaml:snakeyaml
CVE-2021-23369 Vulnerability in npm package handlebars
CVE-2022-47551 Vulnerability in maven package io.apiman:apiman-manager-api-beans