Description
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge() function due to lack of validation input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ts-nodash | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | ts-nodash | < 1.2.7 | 1.2.7 | GHSA-5xjx-4xcm-hpcm |