CVE:CVE-2021-26707
CNNVD:CNNVD-202106-174
merge-deep是开源的一个工具。用于递归合并 JavaScript 对象中的值。
merge-deep 3.0.3之前存在安全漏洞，该漏洞源于merge-deep库可能会被欺骗到覆盖Object的属性，merge-deep库可能会被欺骗到覆盖Object的属性。、
solution:Upgrade merge-deep_project merge-deep to a higher version than 3.0.3,and avoid the version (,3.0.3); Upgrade netapp e-series_performance_analyzer to a higher version than -