Root has patched CVE-2018-16469 in the @rootio/merge package for Root:npm. Multiple fixed versions available.
{ "distro": "npm", "source": "Root", "distro_version": "", "severity": "HIGH" }
""
2.0
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2018-16469.json"
"1.2.1-root.io.2"
true
[ "1.2.1-root.io.1", "1.2.1-root.io.2" ]
1.0
"1.2.1-aikido.2"
[ "1.2.1-aikido.2" ]