← Back to browse · API

CVE-2021-25916

Severity
CRITICAL
CVSS
9.8
EPSS
0.03507
Risk score
40.43
CISA KEV
No
PoC
No
Published
2021-03-16
Modified
2025-04-30
First seen
2026-08-07
Aliases
EUVD-2021-2176, GHSA-84G3-CV89-M9GM
Products
n/a:patchmerge 1.0.0, 1.0.1
Sources
euvd EUVD-2021-2176

Description

Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

References