deepmerge-ts vulnerabilities

2 known vulnerabilities in deepmerge-ts from RebeccaStevens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  deepmerge-ts: Uncontrolled Recursion

  CVE-2026-40345Aug 20, 2026RebeccaStevens

  deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively mergin

• 9.8 Critical severity

  deepmerge-ts: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2022-24802Apr 1, 2022RebeccaStevensEPSS 1.68%

  deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are