CVE-2021-3645

CVE-2021-3645 is a critical prototype pollution vulnerability affecting the 'merge_project merge' library, allowing an attacker to improperly modify object prototype attributes. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.