Typescript Deep Merge
by Typescript Deep Merge Project
CVEs (1)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-25907 | Hig | 0.42 | 7.5 | 0.02 | Aug 9, 2022 | The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function. |
- risk 0.42cvss 7.5epss 0.02
The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.