{"action":"Upgrade @theecryptochad/merge-guard to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"@theecryptochad/merge-guard","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-mhwj-73qx-jqxm","id":"tcs_01M5KG0V1QX7SAA629RA7BAS0Q","modified_at":"2026-05-11T16:17:52.734108Z","published_at":"2026-05-11T16:10:12Z","references":["https://osv.dev/vulnerability/GHSA-mhwj-73qx-jqxm","https://github.com/TheeCryptoChad/merge-guard/security/advisories/GHSA-mhwj-73qx-jqxm","https://github.com/TheeCryptoChad/merge-guard/commit/25e4b4f2618578a656ef3cb4946a1b475f736736","https://github.com/TheeCryptoChad/merge-guard"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mhwj-73qx-jqxm","url":"https://osv.dev/vulnerability/GHSA-mhwj-73qx-jqxm"}],"summary":"@theecryptochad/merge-guard has Prototype Pollution in its deepMerge() function"}