Qualified static finding recorded.
CodeVetter · local evidence export
Prototype pollution via recursive merge in TypeScript
codevetter-public-benchmark/ts-prototype-pollution
detected · high confidence
Verification
No exact-current runtime evidence is included.
No audience validation occurred.
Finding
prototype pollution
The recursive merge walks user-supplied keys without blocking __proto__/constructor/prototype, so a payload like {"__proto__": {"admin": true}} pollutes Object.prototype and escalates privileges across the application.
source.ts:11