Deepmerge Ts Project Deepmerge Ts vulnerabilities

1 vulnerability

Known vulnerabilities in Deepmerge Ts Project Deepmerge Ts, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-24802deepmerge-ts_projectdeepmerge-ts+2
EPSS score
1.68%
deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are no known workarounds for this issue.