CVE-2026-40345
1 advisory.
npm/deepmerge-ts CVE-2026-40345: high
DeepmergeTS has stack exhaustion when merging recursive object graphs
Action: Upgrade deepmerge-ts to 8.0.0 or later.
npm i deepmerge-ts@8.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.0.0 | - |
Fixed versions
| 8.0.0 |
Sources
- osv: GHSA-ggr8-5vv4-36mx
- https://github.com/RebeccaStevens/deepmerge-ts/security/advisories/GHSA-ggr8-5vv4-36mx
- https://github.com/RebeccaStevens/deepmerge-ts
- https://github.com/RebeccaStevens/deepmerge-ts/releases/tag/v8.0.0
CVE-2026-40345 · published · modified · JSON