CVE-2026-46681

Name of the Vulnerable Software and Affected Versions @nevware21/ts-utils versions prior to 0.14.0

Description The copyProps() function in lib/src/object/copy.ts iterates over source object properties using a for...in loop without performing an Object.hasOwnProperty check. Additionally, it fails to filter dangerous keys such as proto, constructor, and prototype. This flaw allows an attacker to perform prototype pollution, which involves modifying the prototype chain of all objects in the application, potentially altering behavior or introducing vulnerabilities across the system.

Recommendations Update @nevware21/ts-utils to version 0.14.0.