diff --git a/CHANGELOG.md b/CHANGELOG.md
index 20a385f4ac..1c1d8f9ea0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+### Bug Fixes
+
+- **util:** prevent prototype pollution in deepMerge ([#5144](https://github.com/stryker-mutator/stryker-js/issues/5144)) ([f7b34bf](https://github.com/stryker-mutator/stryker-js/commit/f7b34bfbbde33e45bc213a2f6058bf0c5bf6bce7))
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 ### Bug Fixes
diff --git a/lerna.json b/lerna.json
index 09836f8dd4..e10c417454 100644
--- a/lerna.json
+++ b/lerna.json
@@ -1,6 +1,6 @@
 {
   "packages": ["packages/*"],
-  "version": "8.7.0",
+  "version": "8.7.1",
   "command": {
     "version": {
       "allowBranch": ["master", "epic/*", "feat/*"],
diff --git a/package-lock.json b/package-lock.json
index 44b5e44420..632ce63a74 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -27033,7 +27033,7 @@
     },
     "packages/api": {
       "name": "@stryker-mutator/api",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
         "mutation-testing-metrics": "3.3.0",
@@ -27050,13 +27050,13 @@
     },
     "packages/core": {
       "name": "@stryker-mutator/core",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
         "@inquirer/prompts": "^6.0.0",
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/instrumenter": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/instrumenter": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "ajv": "~8.17.1",
         "chalk": "~5.3.0",
         "commander": "~12.1.0",
@@ -27083,7 +27083,7 @@
         "stryker": "bin/stryker.js"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/diff-match-patch": "1.0.36",
         "@types/lodash.groupby": "4.6.9",
         "@types/node": "20.17.9",
@@ -27105,10 +27105,10 @@
       }
     },
     "packages/create-stryker": {
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/core": "8.7.0"
+        "@stryker-mutator/core": "8.7.1"
       },
       "bin": {
         "create-stryker": "dist/src/index.js"
@@ -27119,17 +27119,17 @@
     },
     "packages/cucumber-runner": {
       "name": "@stryker-mutator/cucumber-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "ISC",
       "dependencies": {
         "@cucumber/messages": "^26.0.0",
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "semver": "^7.6.3"
       },
       "devDependencies": {
         "@cucumber/cucumber": "11.1.0",
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/semver": "7.5.8"
       },
       "engines": {
@@ -27141,10 +27141,10 @@
       }
     },
     "packages/grunt-stryker": {
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "devDependencies": {
-        "@stryker-mutator/api": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
         "@types/node": "20.17.9"
       },
       "engines": {
@@ -27157,7 +27157,7 @@
     },
     "packages/instrumenter": {
       "name": "@stryker-mutator/instrumenter",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
         "@babel/core": "~7.25.2",
@@ -27166,15 +27166,15 @@
         "@babel/plugin-proposal-decorators": "~7.24.7",
         "@babel/plugin-proposal-explicit-resource-management": "^7.24.7",
         "@babel/preset-typescript": "~7.24.7",
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "angular-html-parser": "~6.0.2",
         "semver": "~7.6.3",
         "weapon-regex": "~1.3.2"
       },
       "devDependencies": {
         "@babel/preset-react": "7.24.7",
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/babel__core": "7.20.5",
         "@types/babel__generator": "7.6.8",
         "@types/estree": "1.0.6",
@@ -27186,14 +27186,14 @@
     },
     "packages/jasmine-runner": {
       "name": "@stryker-mutator/jasmine-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0"
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/node": "20.17.9"
       },
       "engines": {
@@ -27206,16 +27206,16 @@
     },
     "packages/jest-runner": {
       "name": "@stryker-mutator/jest-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "semver": "~7.6.3",
         "tslib": "~2.7.0"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/node": "20.17.9",
         "@types/semver": "7.5.8",
         "jest": "29.7.0",
@@ -27234,17 +27234,17 @@
     },
     "packages/karma-runner": {
       "name": "@stryker-mutator/karma-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "decamelize": "~6.0.0",
         "semver": "~7.6.3",
         "tslib": "~2.7.0"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/express": "4.17.21",
         "@types/node": "20.17.9",
         "@types/semver": "7.5.8",
@@ -27276,15 +27276,15 @@
     },
     "packages/mocha-runner": {
       "name": "@stryker-mutator/mocha-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "tslib": "~2.7.0"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/node": "20.17.9"
       },
       "engines": {
@@ -27297,17 +27297,17 @@
     },
     "packages/tap-runner": {
       "name": "@stryker-mutator/tap-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "glob": "~10.4.5",
         "tap-parser": "~17.0.0",
         "tslib": "~2.7.0"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/node": "20.17.9",
         "ava": "6.2.0",
         "tap": "20.0.3"
@@ -27337,29 +27337,29 @@
     },
     "packages/test-helpers": {
       "name": "@stryker-mutator/test-helpers",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "ISC",
       "dependencies": {
         "ajv": "~8.17.1",
         "mutation-testing-metrics": "3.3.0"
       },
       "devDependencies": {
-        "@stryker-mutator/api": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
         "@types/node": "20.17.9",
         "typed-inject": "4.0.0"
       }
     },
     "packages/typescript-checker": {
       "name": "@stryker-mutator/typescript-checker",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "semver": "~7.6.3"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/semver": "7.5.8"
       },
       "engines": {
@@ -27372,24 +27372,24 @@
     },
     "packages/util": {
       "name": "@stryker-mutator/util",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/node": "20.17.9"
       }
     },
     "packages/vitest-runner": {
       "name": "@stryker-mutator/vitest-runner",
-      "version": "8.7.0",
+      "version": "8.7.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@stryker-mutator/api": "8.7.0",
-        "@stryker-mutator/util": "8.7.0",
+        "@stryker-mutator/api": "8.7.1",
+        "@stryker-mutator/util": "8.7.1",
         "tslib": "~2.7.0"
       },
       "devDependencies": {
-        "@stryker-mutator/test-helpers": "8.7.0",
+        "@stryker-mutator/test-helpers": "8.7.1",
         "@types/node": "20.17.9",
         "@vitest/browser": "2.1.3",
         "playwright": "1.49.0",
diff --git a/packages/api/CHANGELOG.md b/packages/api/CHANGELOG.md
index 213c301b1e..7a1cf47bee 100644
--- a/packages/api/CHANGELOG.md
+++ b/packages/api/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/api
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/api
diff --git a/packages/api/package.json b/packages/api/package.json
index 2dc9ba5c3a..e4e0a3dbc2 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/api",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "The api for the extendable JavaScript mutation testing framework Stryker",
   "type": "module",
   "repository": {
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
index 2f30a67f99..da4d892c77 100644
--- a/packages/core/CHANGELOG.md
+++ b/packages/core/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/core
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 ### Bug Fixes
diff --git a/packages/core/package.json b/packages/core/package.json
index a5dfe94e5c..a29f4671d1 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/core",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "The extendable JavaScript mutation testing framework",
   "type": "module",
   "files": [
@@ -69,9 +69,9 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^6.0.0",
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/instrumenter": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/instrumenter": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "ajv": "~8.17.1",
     "chalk": "~5.3.0",
     "commander": "~12.1.0",
@@ -95,7 +95,7 @@
     "typed-rest-client": "~2.1.0"
   },
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/diff-match-patch": "1.0.36",
     "@types/lodash.groupby": "4.6.9",
     "@types/node": "20.17.9",
diff --git a/packages/create-stryker/CHANGELOG.md b/packages/create-stryker/CHANGELOG.md
index 4d8c546c6f..82e02da5e2 100644
--- a/packages/create-stryker/CHANGELOG.md
+++ b/packages/create-stryker/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package create-stryker
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package create-stryker
diff --git a/packages/create-stryker/package.json b/packages/create-stryker/package.json
index 031f04d4af..1fab9e04a4 100644
--- a/packages/create-stryker/package.json
+++ b/packages/create-stryker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "create-stryker",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "Initializer for StrykerJS",
   "type": "module",
   "files": [
@@ -38,6 +38,6 @@
   "homepage": "https://stryker-mutator.io/",
   "bin": "dist/src/index.js",
   "dependencies": {
-    "@stryker-mutator/core": "8.7.0"
+    "@stryker-mutator/core": "8.7.1"
   }
 }
diff --git a/packages/cucumber-runner/CHANGELOG.md b/packages/cucumber-runner/CHANGELOG.md
index baf8d877e6..780cc53589 100644
--- a/packages/cucumber-runner/CHANGELOG.md
+++ b/packages/cucumber-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/cucumber-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/cucumber-runner
diff --git a/packages/cucumber-runner/package.json b/packages/cucumber-runner/package.json
index fd41ad38e5..5478e79c0a 100644
--- a/packages/cucumber-runner/package.json
+++ b/packages/cucumber-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/cucumber-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the cucumber test runner in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -47,7 +47,7 @@
   "license": "ISC",
   "devDependencies": {
     "@cucumber/cucumber": "11.1.0",
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/semver": "7.5.8"
   },
   "peerDependencies": {
@@ -56,8 +56,8 @@
   },
   "dependencies": {
     "@cucumber/messages": "^26.0.0",
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "semver": "^7.6.3"
   }
 }
diff --git a/packages/grunt-stryker/CHANGELOG.md b/packages/grunt-stryker/CHANGELOG.md
index ec8c8c8866..93cfe8570d 100644
--- a/packages/grunt-stryker/CHANGELOG.md
+++ b/packages/grunt-stryker/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package grunt-stryker
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package grunt-stryker
diff --git a/packages/grunt-stryker/package.json b/packages/grunt-stryker/package.json
index 34c464f95e..6f5c5803fa 100644
--- a/packages/grunt-stryker/package.json
+++ b/packages/grunt-stryker/package.json
@@ -1,7 +1,7 @@
 {
   "name": "grunt-stryker",
   "description": "Grunt plugin for the mutation testing framework 'stryker'",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "bugs": {
     "url": "https://github.com/stryker-mutator/stryker-js/issues"
   },
@@ -37,7 +37,7 @@
   ],
   "main": "Gruntfile.js",
   "devDependencies": {
-    "@stryker-mutator/api": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
     "@types/node": "20.17.9"
   },
   "peerDependencies": {
diff --git a/packages/instrumenter/CHANGELOG.md b/packages/instrumenter/CHANGELOG.md
index a5b7f20adc..d8e8b91e42 100644
--- a/packages/instrumenter/CHANGELOG.md
+++ b/packages/instrumenter/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/instrumenter
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/instrumenter
diff --git a/packages/instrumenter/package.json b/packages/instrumenter/package.json
index c3298bdc3f..a49ccee7cd 100644
--- a/packages/instrumenter/package.json
+++ b/packages/instrumenter/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/instrumenter",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "The code instrumenter used in Stryker, the JavaScript mutation testing framework",
   "main": "dist/src/index.js",
   "type": "module",
@@ -47,15 +47,15 @@
     "@babel/plugin-proposal-decorators": "~7.24.7",
     "@babel/plugin-proposal-explicit-resource-management": "^7.24.7",
     "@babel/preset-typescript": "~7.24.7",
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "angular-html-parser": "~6.0.2",
     "semver": "~7.6.3",
     "weapon-regex": "~1.3.2"
   },
   "devDependencies": {
     "@babel/preset-react": "7.24.7",
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/babel__core": "7.20.5",
     "@types/babel__generator": "7.6.8",
     "@types/estree": "1.0.6",
diff --git a/packages/jasmine-runner/CHANGELOG.md b/packages/jasmine-runner/CHANGELOG.md
index 156d01b29c..512bc12c5f 100644
--- a/packages/jasmine-runner/CHANGELOG.md
+++ b/packages/jasmine-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/jasmine-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/jasmine-runner
diff --git a/packages/jasmine-runner/package.json b/packages/jasmine-runner/package.json
index 8bf90cc87b..0bda84f191 100644
--- a/packages/jasmine-runner/package.json
+++ b/packages/jasmine-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/jasmine-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the Jasmine (NodeJS) test runner in Stryker, the mutation testing framework for JavaScript and friends",
   "files": [
     "dist/schema",
@@ -54,12 +54,12 @@
     "jasmine": ">=3.10 <6"
   },
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/node": "20.17.9"
   },
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0"
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1"
   },
   "initStrykerConfig": {
     "jasmineConfigFile": "spec/support/jasmine.json"
diff --git a/packages/jest-runner/CHANGELOG.md b/packages/jest-runner/CHANGELOG.md
index 2f6bcb0728..df97fd719c 100644
--- a/packages/jest-runner/CHANGELOG.md
+++ b/packages/jest-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/jest-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/jest-runner
diff --git a/packages/jest-runner/package.json b/packages/jest-runner/package.json
index 6ed45b8f21..a6681daa81 100644
--- a/packages/jest-runner/package.json
+++ b/packages/jest-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/jest-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the jest test runner and framework in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -68,7 +68,7 @@
   },
   "homepage": "https://stryker-mutator.io/docs/stryker-js/jest-runner",
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/node": "20.17.9",
     "@types/semver": "7.5.8",
     "jest": "29.7.0",
@@ -82,8 +82,8 @@
     "@stryker-mutator/core": "~8.7.0"
   },
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "semver": "~7.6.3",
     "tslib": "~2.7.0"
   },
diff --git a/packages/karma-runner/CHANGELOG.md b/packages/karma-runner/CHANGELOG.md
index 515a899bbc..d7efcda4d9 100644
--- a/packages/karma-runner/CHANGELOG.md
+++ b/packages/karma-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/karma-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 ### Features
diff --git a/packages/karma-runner/package.json b/packages/karma-runner/package.json
index 08ef4cfee3..4a97261849 100644
--- a/packages/karma-runner/package.json
+++ b/packages/karma-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/karma-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the karma test runner in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -48,7 +48,7 @@
   },
   "homepage": "https://stryker-mutator.io/docs/stryker-js/karma-runner",
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/express": "4.17.21",
     "@types/node": "20.17.9",
     "@types/semver": "7.5.8",
@@ -63,8 +63,8 @@
     "@stryker-mutator/core": "~8.7.0"
   },
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "decamelize": "~6.0.0",
     "semver": "~7.6.3",
     "tslib": "~2.7.0"
diff --git a/packages/mocha-runner/CHANGELOG.md b/packages/mocha-runner/CHANGELOG.md
index 338da44d84..79e658633b 100644
--- a/packages/mocha-runner/CHANGELOG.md
+++ b/packages/mocha-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/mocha-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 ### Bug Fixes
diff --git a/packages/mocha-runner/package.json b/packages/mocha-runner/package.json
index 5b0269b25b..7f07414010 100644
--- a/packages/mocha-runner/package.json
+++ b/packages/mocha-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/mocha-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the mocha test runner in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -50,12 +50,12 @@
   },
   "homepage": "https://stryker-mutator.io/docs/stryker-js/mocha-runner",
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "tslib": "~2.7.0"
   },
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/node": "20.17.9"
   },
   "peerDependencies": {
diff --git a/packages/tap-runner/CHANGELOG.md b/packages/tap-runner/CHANGELOG.md
index 97e7b9697a..2cddc2936d 100644
--- a/packages/tap-runner/CHANGELOG.md
+++ b/packages/tap-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/tap-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/tap-runner
diff --git a/packages/tap-runner/package.json b/packages/tap-runner/package.json
index c7d7680bf9..9e7c616025 100644
--- a/packages/tap-runner/package.json
+++ b/packages/tap-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/tap-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the TAP (test anything protocol) test runner in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -49,14 +49,14 @@
   },
   "homepage": "https://stryker-mutator.io/docs/stryker-js/tap-runner",
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "glob": "~10.4.5",
     "tap-parser": "~17.0.0",
     "tslib": "~2.7.0"
   },
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/node": "20.17.9",
     "ava": "6.2.0",
     "tap": "20.0.3"
diff --git a/packages/test-helpers/CHANGELOG.md b/packages/test-helpers/CHANGELOG.md
index d3ae15d9de..0217424ddb 100644
--- a/packages/test-helpers/CHANGELOG.md
+++ b/packages/test-helpers/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/test-helpers
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 ### Features
diff --git a/packages/test-helpers/package.json b/packages/test-helpers/package.json
index 2969e46722..a5993624c1 100644
--- a/packages/test-helpers/package.json
+++ b/packages/test-helpers/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@stryker-mutator/test-helpers",
   "private": true,
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A helper package for testing",
   "exports": {
     ".": {
@@ -28,7 +28,7 @@
     "mutation-testing-metrics": "3.3.0"
   },
   "devDependencies": {
-    "@stryker-mutator/api": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
     "@types/node": "20.17.9",
     "typed-inject": "4.0.0"
   }
diff --git a/packages/typescript-checker/CHANGELOG.md b/packages/typescript-checker/CHANGELOG.md
index 26690a42a6..22c1c7d68f 100644
--- a/packages/typescript-checker/CHANGELOG.md
+++ b/packages/typescript-checker/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/typescript-checker
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/typescript-checker
diff --git a/packages/typescript-checker/package.json b/packages/typescript-checker/package.json
index aa3c77d12b..f76e8775a8 100644
--- a/packages/typescript-checker/package.json
+++ b/packages/typescript-checker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/typescript-checker",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A typescript type checker plugin to be used in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -46,12 +46,12 @@
   },
   "homepage": "https://stryker-mutator.io/docs/stryker-js/typescript-checker",
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "semver": "~7.6.3"
   },
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/semver": "7.5.8"
   },
   "peerDependencies": {
diff --git a/packages/util/CHANGELOG.md b/packages/util/CHANGELOG.md
index a5a3a35f81..acb18e0fcc 100644
--- a/packages/util/CHANGELOG.md
+++ b/packages/util/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+### Bug Fixes
+
+- **util:** prevent prototype pollution in deepMerge ([#5144](https://github.com/stryker-mutator/stryker-js/issues/5144)) ([f7b34bf](https://github.com/stryker-mutator/stryker-js/commit/f7b34bfbbde33e45bc213a2f6058bf0c5bf6bce7))
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/util
diff --git a/packages/util/package.json b/packages/util/package.json
index c7b7848ea5..ef807504cb 100644
--- a/packages/util/package.json
+++ b/packages/util/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/util",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "Contains utilities for Stryker, the mutation testing framework for JavaScript and friends",
   "files": [
     "dist/src",
@@ -39,7 +39,7 @@
   },
   "homepage": "https://github.com/stryker-mutator/stryker-js/tree/master/packages/util#readme",
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/node": "20.17.9"
   }
 }
diff --git a/packages/vitest-runner/CHANGELOG.md b/packages/vitest-runner/CHANGELOG.md
index e422d68a30..8087b44dd7 100644
--- a/packages/vitest-runner/CHANGELOG.md
+++ b/packages/vitest-runner/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.7.1](https://github.com/stryker-mutator/stryker-js/compare/v8.7.0...v8.7.1) (2024-12-11)
+
+**Note:** Version bump only for package @stryker-mutator/vitest-runner
+
 # [8.7.0](https://github.com/stryker-mutator/stryker-js/compare/v8.6.0...v8.7.0) (2024-12-06)
 
 **Note:** Version bump only for package @stryker-mutator/vitest-runner
diff --git a/packages/vitest-runner/package.json b/packages/vitest-runner/package.json
index 7396ecce43..a6f4719433 100644
--- a/packages/vitest-runner/package.json
+++ b/packages/vitest-runner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stryker-mutator/vitest-runner",
-  "version": "8.7.0",
+  "version": "8.7.1",
   "description": "A plugin to use the vitest test runner and framework in Stryker, the JavaScript mutation testing framework",
   "files": [
     "dist/schema",
@@ -49,7 +49,7 @@
   },
   "homepage": "https://stryker-mutator.io/docs/stryker-js/vitest-runner",
   "devDependencies": {
-    "@stryker-mutator/test-helpers": "8.7.0",
+    "@stryker-mutator/test-helpers": "8.7.1",
     "@types/node": "20.17.9",
     "@vitest/browser": "2.1.3",
     "playwright": "1.49.0",
@@ -61,8 +61,8 @@
     "vitest": ">=0.31.2"
   },
   "dependencies": {
-    "@stryker-mutator/api": "8.7.0",
-    "@stryker-mutator/util": "8.7.0",
+    "@stryker-mutator/api": "8.7.1",
+    "@stryker-mutator/util": "8.7.1",
     "tslib": "~2.7.0"
   },
   "initStrykerConfig": {