Prototype Pollution in merge
Published Nov 1, 2018
Prototype Pollution in merge
Published May 4, 2021
Prototype Pollution in merge-deep
Published Jul 26, 2018
Prototype pollution vulnerability in 'patchmerge'
Published Oct 13, 2021
Prototype Pollution in merge-options
Published Oct 9, 2018
ts-deepmerge before 2.0.2 vulnerable to Prototype Pollution
Published Aug 10, 2022
Prototype pollution in ag-grid-community via the _.mergeDeep function
Published Jul 1, 2024
Prototype Pollution in merge-change
Published Sep 1, 2021
MikroORM has Prototype Pollution in Utils.merge
Published Mar 29, 2026
algoliasearch-helper is vulnerable to Prototype Pollution in _merge()
Published Sep 27, 2025
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Published Mar 25, 2026
Malicious code in tailwind-merge-v3 (npm)
Published Jan 16, 2026
Prototype pollution in json8-merge-patch
Published May 10, 2021
Prototype pollution in controlled-merge
Published May 18, 2021
Prototype pollution in Merge-deep
Published Jun 7, 2021
Prototype Pollution in deepmerge-ts
Published Apr 1, 2022
Redoc Prototype Pollution via `Module.mergeObjects` Component
Published Mar 28, 2025
Deep Merge is Vulnerable to Prototype Pollution Through Lack of Sanitization
Published Apr 20, 2026
Prototype Pollution in merge-recursive
Published Sep 18, 2018
Prototype Pollution in putil-merge
Published Feb 5, 2022
merge vulnerable to Prototype Pollution
Published Sep 13, 2021
js-yaml has prototype pollution in merge (<<)
Published Nov 14, 2025
Prototype Pollution in putil-merge
Published Dec 10, 2021
Prototype Pollution in the merge and clone helper methods
Published Sep 20, 2021
Malicious code in babelhelspevvuejsxmergeprops (npm)
Published Aug 19, 2022
Prototype Pollution in async merge-object
Published Sep 18, 2018
n8n Merge Node has Arbitrary File Write leading to RCE
Published Feb 4, 2026
willitmerge has a Command Injection vulnerability
Published Nov 26, 2025
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
Published Feb 9, 2026
@ianwalter/merge Prototype Pollution via `merge` function
Published Jul 26, 2022
Malicious code in mergeseekrangegaps (npm)
Published Jun 20, 2022
Prototype Pollution in merge-deep2.
Published Dec 16, 2021
Malicious code in broccolirmergetes (npm)
Published Aug 19, 2022
Malicious code in jest-coverage-merge (npm)
Published May 6, 2025
Malicious code in uxpin-merge-ms-fabric (npm)
Published Jun 20, 2022
n8n has Potential Remote Code Execution via Merge Node
Published Feb 25, 2026
Prototype Pollution in deepmergefn
Published Aug 10, 2021
Malicious code in @msmg/vue-merge-data-qa (npm)
Published Jun 20, 2022
Malicious code in automerge-action (npm)
Published Jan 20, 2025
Malicious code in tailwind-merge-v2 (npm)
Published Jan 16, 2026
Malicious code in label-merge-conflicts-action (npm)
Published Dec 16, 2024
Malicious code in json-merge-tool (npm)
Published Mar 9, 2026