CVE-2021-23568

Publication date

2022-01-07 20:05:13

Family

snyk

State

PUBLISHED

Description

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.