CVE-2022-25907
CVE-2022-25907 · Prototype Pollution
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.
CVSS 7.5 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
ts-deepmerge
- Versions
- ≥ unspecified, < 2.0.2: Affected (custom)
Update to 2.0.2
ts-deepmerge npm
- Affected ranges
- SEMVER: < 2.0.2
Update to 2.0.2