{"action":"Upgrade ts-deepmerge to 8.0.0 or later.","affected":[{"fixed":"8.0.0","introduced":"0"}],"component":"ts-deepmerge","cve_ids":["CVE-2026-12644"],"ecosystem":"npm","epss":0.00507,"exploited":false,"fixed_versions":["8.0.0"],"ghsa_id":"GHSA-87mf-gv2c-c62c","id":"tcs_01M5KFC5874PX0KBDT105S7DGE","modified_at":"2026-06-19T21:56:30.084657Z","published_at":"2026-06-19T06:31:56Z","references":["https://osv.dev/vulnerability/GHSA-87mf-gv2c-c62c","https://nvd.nist.gov/vuln/detail/CVE-2026-12644","https://github.com/voodoocreation/ts-deepmerge/commit/305a05831a462fb2c353d3cbbff55a0733286f8c","https://gist.github.com/igorg1312/775fa00114c4d47df6ae0551779ab407","https://github.com/voodoocreation/ts-deepmerge","https://security.snyk.io/vuln/SNYK-JS-TSDEEPMERGE-17339141"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-87mf-gv2c-c62c","url":"https://osv.dev/vulnerability/GHSA-87mf-gv2c-c62c"}],"summary":"ts-deepmerge: Prototype Method Override leads to DoS"}