@phun-ky/defaults-deep vulnerabilities

CVEs whose affected-version data names the @phun-ky/defaults-deep package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54737High· 7.3

1mo ago

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep() recursively merges user-supplied objects without filtering proto, constructor, and prototype, a…

▾ Twilightphun-ky · @phun-ky/defaults-deepEPSS 0.26%via NVD