CVE-2022-25907 The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge…

Description

The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.

Affected products and versions

Product	Affected versions	Fixed in
ts-deepmerge 2.0	earliest → < 2.0.2	2.0.2

Other CVEs of ts-deepmerge

The 2 CVEs of ts-deepmerge →

CVE-2026-12644 Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of… 5.3 Medium