CVE-2022-25907

CVE-2022-25907 affects the npm package ts-deepmerge prior to 2.0.2 and is caused by missing sanitization in the merge function, enabling prototype pollution. The vulnerability is described across multiple sources as allowing modification/ contamination of Object.prototype, with potential impact o...

CVE-2022-25907

The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function...

deepmerge-ts 安全漏洞

deepmerge-ts is an npm package. It is used to deep merge 2 or more objects with respect to type information. A security vulnerability exists in versions of deepmerge-ts prior to 2.0.2, which stems from the lack of handling of merge functions and is susceptible to prototype contamination...

PT-2022-17598 · Unknown · Ts-Deepmerge

Name of the Vulnerable Software and Affected Versions: ts-deepmerge versions prior to 2.0.2 Description: The issue is related to Prototype Pollution due to missing sanitization of the merge function. This allows for potential manipulation of the prototype, leading to various security issues...

CVE-2022-25907: Improperly Controlled Modification of Object Prototype Attributes

The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function...

@alloyify/anvil (>=1.1.2, <=1.1.4), @alloyify/devkit (>=1.1.2, <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (2.0.1)

ts-deepmerge NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1607 Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1606 Malicious code in blank-ts-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbbaa2da3818f952bc73b9783271c529948837dd554453a3a8ccf3eecba72706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3344 Malicious code in geoadv-ts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c47caa11253203c249aa0ca38da1140e5ef612bc4d17f527da8642a3244108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geoadv-ts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c47caa11253203c249aa0ca38da1140e5ef612bc4d17f527da8642a3244108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3327 Malicious code in gen-ts-googleapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e25a82fd6464deed322629378691092d9c4a9c6bd5745fb9e356ab9f755031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gen-ts-googleapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e25a82fd6464deed322629378691092d9c4a9c6bd5745fb9e356ab9f755031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-genapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba138c9b1667f78be37dab2626db52b8482ad77d8166821bebdb11dcbdbc2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6661 Malicious code in ts-genapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba138c9b1667f78be37dab2626db52b8482ad77d8166821bebdb11dcbdbc2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7080 Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-data-tables-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f12451ce5dfc182de3cf34ae16c5a54d089805c93efabed52b2ee148cd3c379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1343 Malicious code in azure-keyvault-admin-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c6895fa55849501987a9fd8669e21d952f6d1e7aa884e5184c0d6858d12dd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-agrifood-farming-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389753c632d882662d94001f13cd022e978b7430f4534f1878a3610dd5f0e5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...