merge-object project Merge Object Vulnerabilities