Advisories for Npm/Merge package

2022
2021
2018

Improper Input Validation

The merge.recursive function in the merge package can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.