cnvd-2021-22478

EUVD-2026-176850

In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.

Affected: npm: casperjs

### Overview casperjs is a navigation scripting & testing utility for PhantomJS and SlimerJS.

Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects utility function.

### PoC ```js var payload = JSON.parse('{"__proto__": {"a": "pwned"}}'); mergeObjects({}, payload); console.log({}.a); // prints "pwned" ```