4 matches found
CVE-2026-78654
A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...
@cleverbrush/knex-clickhouse (>=1.1.8, <=3.1.0), @cleverbrush/schema (>=0.0.3, <=0.0.17) potentially affected by CVE-2026-78654 via @cleverbrush/deep (>=0.0.3, <=3.1.0)
@cleverbrush/deep NPM version =0.0.3, =1.1.8, =0.0.3, =0.0.17 Source cves: CVE-2026-78654 Source advisory: MEND:CVE-2026-78654...
EUVD-2026-65304
A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...
CVE-2026-78654 cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution
A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...