CVE-2024-38990: TADA5HI SP Common

Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Affected products

• TADA5HI SP Common: version 0.5.4 only

Published 2024-07-01. Last modified 2026-06-17.