TI-2026-63119 CVE-2026-93753 · GHSA-gcqx-w48m-w2h4deepmerge through 4.3.1 Prototype Poisoning via mergeObjectPriority HIGH 77deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properly validate keys being written to target objects.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00514 · Published 2026-09-18 · No fix listed CWE-1321