Vulnerability library
Security checkSeptember 25, 2025

ts-fns has prototype pollution vulnerability

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severitynpmts-fns

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

A prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation of user-provided keys in the assign function allows attackers to manipulate the Object.prototype chain.

Recommendation

No fix is available yet. Followings are affected versions:

  • <= 13.1.3

References

Could your website be exposed too?

SmartScanner can check your website for ts-fns has prototype pollution vulnerability and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Exploiting Server Version Disclosure

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

See something that needs correcting? Let us knowUpdated September 25, 2025