Vulnerabilidades de Phun-ky

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Phun-ky: 1 registro(s), com severidade, exploração e correções.

Defaults-deep 1

Somente exploradas (KEV) →

CVE-2026-54737 Alta · 7.3 CWE-1321 31/07/2026

@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep() recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This issue is fixed in version 2.0.5.