Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| putil-merge(npm) | 1.0.0 | 3.7.0 | N/A |
CVSS Metrics
