← Database

CVE-2024-38986

CRITICAL CVSS: 9.8 Published: 2024-07-30 Modified: 2026-06-17

Description

Prototype Pollution in 75lb deep-merge 1.1.1 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via merge methods of lodash to merge objects.

Affected Platforms

75Lb Deep-Merge

Weakness Type

CWE-1321, CWE-1321

References