CVE-2026-78654

A prototype pollution vulnerability in the deepExtend function of cleverbrush framework/deep (file libs/deep/src/deepExtend.ts) allows improper modification of object prototype attributes, enabling remote exploitation without authentication. Affected versions are up to 4.4.0 . The exploit has bee...

CVE-2026-78654: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...