CVE-2026-12644
1 advisory.
npm/ts-deepmerge CVE-2026-12644: medium 5.3
ts-deepmerge: Prototype Method Override leads to DoS
Action: Upgrade ts-deepmerge to 8.0.0 or later.
npm i ts-deepmerge@8.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.0.0 | - |
Fixed versions
| 8.0.0 |
Sources
- osv: GHSA-87mf-gv2c-c62c
- https://nvd.nist.gov/vuln/detail/CVE-2026-12644
- https://github.com/voodoocreation/ts-deepmerge/commit/305a05831a462fb2c353d3cbbff55a0733286f8c
- https://gist.github.com/igorg1312/775fa00114c4d47df6ae0551779ab407
- https://github.com/voodoocreation/ts-deepmerge
- https://security.snyk.io/vuln/SNYK-JS-TSDEEPMERGE-17339141
CVE-2026-12644 · published · modified · JSON