CVE-2025-57351

A prototype pollution vulnerability exists in the ts-fns package (versions prior to 13.0.7, including 13.1.3). The root cause is insufficient validation of user-provided keys within the assign function during deep property assignment operations, allowing attackers to manipulate the Object.prototy...