Cpe:2.3:a:deepmerge_project:deepmerge:*:*:*:*:*:node.js:*:*

The deepmerge library up to version 4.3.1 contains a prototype pollution vulnerability in the mergeObject() function, allowing attackers to inject malicious properties into objects.