Improperly Controlled Modification of Dynamically-Determined Object Attributes
All versions of package merge-change is vulnerable to Prototype Pollution via the utils.set function.
All versions of package merge-change is vulnerable to Prototype Pollution via the utils.set function.