A vulnerability was found in xe-utils 3.5.31. It has been rated as problematic. Affected by this issue is the function
lib.merge. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
This vulnerability is handled as CVE-2024-57074. The attack needs to be approached within the local network. There is no exploit available.
