All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .

By admin