https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:37:08.976623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-176295 EUVD-2026-176295 2026-10-04T14:37:08.979426+00:00 EUVD-2026-176295 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23470 fkie_cve-2021-23470 2026-10-04T14:37:08.979465+00:00

This affects the package putil-merge before 3.8.0. The merge() function does not check the values passed into the argument. An attacker can supply a malicious value by adjusting the value to include the constructor property. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-PUTILMERGE-1317077

 https://cve.radiocsirt.org/vuln/ghsa-4g77-cvgw-grvw GHSA-4g77-cvgw-grvw — Prototype Pollution in putil-merge 2026-10-04T14:37:08.979498+00:00

Affected: npm: putil-merge

This affects the package putil-merge before 3.8.0. The merge() function does not check the values passed into the argument. An attacker can supply a malicious value by adjusting the value to include the constructor property. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-PUTILMERGE-1317077

 https://cve.radiocsirt.org/vuln/gsd-2021-23470 gsd-2021-23470 2026-10-04T14:37:08.979523+00:00 gsd-2021-23470