voodoocreation/ts-deepmerge

Releases33

Frequency2 months 1 week

Last Release about 1 month ago

Stars146

A TypeScript deep merge function with automatically inferred types.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-25907 ↗	Aug 9, 2022Tuesday, 9 August 2022, 05:15	7.5 HIGH	—
The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.