Lucene search
+L

81 matches found

Github Security Blog
Github Security Blog
added 2026/06/19 6:31 a.m.11 views

ts-deepmerge: Prototype Method Override leads to DoS

Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of built-in Object.prototype methods such as toString, valueOf. When user-controlled input contains these keys with non-function values, the resulting merged object becomes broken —...

6.9CVSS5.9AI score0.00507EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder