Description
All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MERGEDEEP2-1727593
Related Vulnerabilities
CVE-2020-8129 Vulnerability in npm package script-manager
CVE-2016-10735 Vulnerability in maven package com.loopeer.android:bootstrap
CVE-2022-28157 Vulnerability in maven package com.surenpi.jenkins:phoenix-autotest
CVE-2023-26134 Vulnerability in npm package git-commit-info
CVE-2021-3815 Vulnerability in npm package @fabiocaccamo/utils.js