CVE-2022-25907

Description

The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.

Affected Platforms

Weakness Type

CWE-1321

References

• https://github.com/voodoocreation/ts-deepmerge/commit/9be5148773343c57be9de39728…
• https://github.com/voodoocreation/ts-deepmerge/releases/tag/2.0.2
• https://security.snyk.io/vuln/SNYK-JS-TSDEEPMERGE-2959975
• https://github.com/voodoocreation/ts-deepmerge/commit/9be5148773343c57be9de39728…
• https://github.com/voodoocreation/ts-deepmerge/releases/tag/2.0.2
• https://security.snyk.io/vuln/SNYK-JS-TSDEEPMERGE-2959975