Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-25907

Prototype Pollution

Description

The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a ts-deepmerge

  • unspecified to < 2.0.2affected

References