CVE-2026-104852 | ardatan GraphQL Tools up to 12.0.0 Utils mergeDeep prototype pollution

October 6, 2026 Yanac

A vulnerability was found in ardatan GraphQL Tools up to 12.0.0. It has been rated as critical. Impacted is the function mergeDeep of the component Utils. Performing a manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is reported as CVE-2026-104852. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More