RebeccaStevens vulnerabilities
We track 2 vulnerabilities in RebeccaStevens products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score
Latest RebeccaStevens vulnerabilities
- 8.2 High severity
deepmerge-ts: Uncontrolled Recursion
deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively mergin
- 9.8 Critical severity
deepmerge-ts: Improperly Controlled Modification of Object Prototype Attributes
deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are