← Database

CVE-2022-24802

HIGH CVSS: 8.1 Published: 2022-04-01 Modified: 2026-06-17

Description

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are no known workarounds for this issue.

Affected Platforms

Deepmerge-Ts Project Deepmerge-Ts

Weakness Type

CWE-915, CWE-1321

References