9.8 Critical

CVE-2021-25916 Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of…

Description

Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products and versions

Product	Affected versions	Fixed in
patchmerge	Versions not published

Do you use patchmerge?

Track this CVE Watch patchmerge Check my SBOMs

cveye.io/en/cve/CVE-2021-25916

Timeline

Published March 16, 2021
Last modified April 30, 2025

References

www.whitesourcesoftware.com www.whitesourcesoftware.com
github.com github.com

Track this CVE