Prototype Pollution

typeorm is vulnerable to prototype pollution. The mergeDeep function of OrmUtils.ts fails to validate the Object key value ...sources parameter, allowing an attacker to perform prototype pollution attacks by providing built-in properties such as proto...

Prototype Pollution

utilitify causes prototype pollution. The vulnerability exists as it allows the proto property to be merged through the mergeDeep function...