CVE-2026-40345 | RebeccaStevens deepmerge-ts up to 7.x stack-based overflow

A vulnerability categorized as problematic has been discovered in RebeccaStevens deepmerge-ts up to 7.x. This affects the function deepmerge/deepmergeCustom/deepmergeInto/deepmergeIntoCustom. The manipulation results in stack-based buffer overflow.

This vulnerability is identified as CVE-2026-40345. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More