nevware21 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH nevware21 CVE published 2026-07-21

CVE-2026-46681

CVE-2026-46681 is a vulnerability in the @nevware21/ts-utils library, which is a comprehensive TypeScript/JavaScript utility library. The vulnerability exists in the _copyProps function in lib/src/object/copy.ts, where it uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys (__proto__, constructor, prototype). This allows an atta [truncated]