RebeccaStevens/deepmerge-ts

RebeccaStevens/deepmerge-ts

GitHubGitHub
GitHubgithub.com
Releases55
Frequency3 weeks 2 days
Last Release
Stars297
Deeply merge 2 or more objects respecting type information.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-24802↗
8.1 HIGH7.5 HIGH

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are no known workarounds for this issue.