CVE-2021-23421

MEDIUM

merge-change - Prototype Pollution via utils.set Function

Title source: llm

All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Broken Link x_refsource_misc

CVSS v3 5.6

EPSS 0.0108

EPSS Percentile 60.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-1321

Status published

Products (2)

merge-change_project/merge-change

npm/merge-change 0npm

Published Aug 11, 2021

Tracked Since Feb 18, 2026