CVE-2022-24802

8.1HIGH

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecord

公開日: 4/1/2022更新日: 11/21/2024
NVDで表示MITREで表示

説明

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are no known workarounds for this issue.

AI分析AIによる分析

影響を受ける製品

deepmerge-ts_projectdeepmerge-ts

参照