Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36644
HistoryAug 10, 2022 - 5:08 a.m.

Prototype Pollution

2022-08-1005:08:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
ts-deepmerge
vulnerability
prototype pollution
sanitization
merge parameters
javascript application object

0.002 Low

EPSS

Percentile

59.3%

ts-deepmerge is vulnerable to pollution prototype. The vulnerability exists because of missing sanitization of the merge parameters in ‘src/index.test.ts’, allowing an attacker to inject malicious characteristics to add new values to a javascript application object prototype,overwriting or contaminating the base object.

CPENameOperatorVersion
ts-deepmergele2.0.1
ts-deepmergele2.0.1

0.002 Low

EPSS

Percentile

59.3%

Related for VERACODE:36644