Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Igor Garofano

#48213of 56,330
5.5Total CVSS
Vulnerabilities · 1
PT-2026-50839
5.5
2026-06-19
Npm · Ts-Deepmerge · CVE-2026-12644
**Name of the Vulnerable Software and Affected Versions** ts-deepmerge versions prior to 8.0.0 **Description** An uncaught exception occurs due to improper handling of built-in Object.prototype methods, such as `toString` and `valueOf`. When user-controlled input contains these keys with non-function values, the resulting merged object is corrupted. Consequently, any string context operation triggers a TypeError, which leads to an application crash. **Recommendations** Update to version 8.0.0 or later.