Vulnerabilities > Umbraengineering > Merge Recursive > 0.0.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-07-03 | CVE-2018-3751 | Improper Input Validation vulnerability in Umbraengineering Merge-Recursive The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. | 7.5 |