Description
All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MERGEDEEP2-1727593
Related Vulnerabilities
CVE-2013-4152 Vulnerability in maven package org.springframework:spring-web
CVE-2023-41592 Vulnerability in npm package froala-editor
CVE-2022-41879 Vulnerability in npm package parse-server
CVE-2021-26707 Vulnerability in npm package merge-deep
CVE-2018-9207 Vulnerability in maven package org.webjars.bowergithub.blueimp:jquery-file-upload