CVE ID :CVE-2026-93753
Published : Sept. 18, 2026, 5:51 p.m. | 37 minutes ago
Description :deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properly validate keys being written to target objects. Attackers can supply malicious source objects in merge operations to inject attacker-controlled properties into the returned object’s prototype, causing applications to inherit unintended values when accessing properties without own-property checks.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More