01 Record

CVE-2026-40345

deepmerge-ts: Stack exhaustion when merging recursive object graphs

HighPUBLISHEDCNA: GitHub_M

Base score8.2 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

02 Description

deepmerge-ts: Stack exhaustion when merging recursive object graphs

Published

2026-08-20 16:33Z1 DAY AGO

Last updated

2026-08-20 16:33Z1 DAY AGO

Reserved

2026-04-10

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 8.2)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

9e2f4e9f38a6724b4ad49b1ab5bd2768d4b0489573efa49b03997843d6355d03

VendorProductVersionsPlatforms

RebeccaStevensdeepmerge-ts< 8.0.0—