https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:41:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-01299 cnvd-2019-01299 https://cve.radiocsirt.org/vuln/cnvd-2019-01299 https://cve.radiocsirt.org/vuln/euvd-2026-68131 EUVD-2026-68131 https://cve.radiocsirt.org/vuln/euvd-2026-68131 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16469 <p>The merge.recursive function in the merge package &lt;1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.</p> <p>The merge.recursive function in the merge package &lt;1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16469 https://cve.radiocsirt.org/vuln/ghsa-f9cm-qmx5-m98h <p><strong>Affected:</strong> npm: merge</p> <p>Versions of `merge` before 1.2.1 are vulnerable to prototype pollution. The `merge.recursive` function can be tricked into adding or modifying properties of the Object prototype.</p> <p>## Recommendation</p> <p>Update to version 1.2.1 or later.</p> <p><strong>Affected:</strong> npm: merge</p> <p>Versions of `merge` before 1.2.1 are vulnerable to prototype pollution. The `merge.recursive` function can be tricked into adding or modifying properties of the Object prototype.</p> <p>## Recommendation</p> <p>Update to version 1.2.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-f9cm-qmx5-m98h https://cve.radiocsirt.org/vuln/gsd-2018-16469 gsd-2018-16469 https://cve.radiocsirt.org/vuln/gsd-2018-16469 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16469 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-merge, Ubuntu:18.04:LTS: node-merge, Ubuntu:20.04:LTS: node-merge, Ubuntu:22.04:LTS: node-merge</p> <p>The merge.recursive function in the merge package &lt;1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-merge, Ubuntu:18.04:LTS: node-merge, Ubuntu:20.04:LTS: node-merge, Ubuntu:22.04:LTS: node-merge</p> <p>The merge.recursive function in the merge package &lt;1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16469