deepmerge vulnerabilities (npm)

1 vulnerability.

• deepmerge npm deepmerge mergeObject() allows prototype poisoning of returned objects CVE-2026-93753 Fix availableRejected 2.7 LowSeptember 18, 2026