Vulnerabilities

Summary — last 7 days

New vulnerabilities2,780▲ 24 vs. last week
Critical / high1,288▼ 240 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)242▲ 224 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)1.8%—Typescript Deep Merge Project Typescript Deep Merge8/9/20226/17/2026
The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.
Orbitaley — Vulnerabilities