A vulnerability was found in cli-util 1.1.27. It has been classified as problematic. Affected is the function
lib.merge. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
This vulnerability is traded as CVE-2024-57078. The attack can only be initiated within the local network. There is no exploit available.
