Skip to content
OpenAdvisories

Vendor

phun-ky

1 known vulnerabilities.

Products

defaults-deep 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-54737

    @phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging

    @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep() recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to …

    phun-ky defaults-deep @phun-ky/defaults-deep npm