CVE-2026-46681
NONE—CVSS v3
—CVSS v2
0.28%
EPSS (exploit probability)
CWE-1321CWE
Description
@nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the _copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys (__proto__, constructor, prototype). This allows an attacker to pollute the prototype chain of all objects in the application. Version 0.14.0 patches the issue.
Affected routers (0)
No routers currently mapped to this CVE in our database.