CVE-2018-3722

CVE-2018-3722 is a Modification of Assumed-Immutable Data (MAID) vulnerability affecting the merge-deep node module prior to version 3.0.1. This flaw allows an authenticated attacker to manipulate the prototype of the "Object" via __proto__, leading to the addition or modification of properties across all objects. Rated 8.8 HIGH, this vulnerability has a low attack complexity and can result in high impacts to confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.