CVE-2026-78654

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...

@cleverbrush/knex-clickhouse (>=1.1.8, <=3.1.0), @cleverbrush/schema (>=0.0.3, <=0.0.17) potentially affected by CVE-2026-78654 via @cleverbrush/deep (>=0.0.3, <=3.1.0)

@cleverbrush/deep NPM version =0.0.3, =1.1.8, =0.0.3, =0.0.17 Source cves: CVE-2026-78654 Source advisory: MEND:CVE-2026-78654...

CVE-2026-78654

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...

EUVD-2026-65304

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...

CVE-2026-78654 cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...

CVE-2026-78654 cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...

CVE-2026-78654

A prototype pollution vulnerability in the deepExtend function of cleverbrush framework/deep (file libs/deep/src/deepExtend.ts) allows improper modification of object prototype attributes, enabling remote exploitation without authentication. Affected versions are up to 4.4.0 . The exploit has bee...

PT-2026-81180

Name of the Vulnerable Software and Affected Versions cleverbrush framework and deep versions prior to 4.4.1 Description Prototype Pollution occurs in the deepExtend function within the libs/deep/src/deepExtend.ts file. This issue allows for the improperly controlled modification of object...

CVE-2026-78654: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...