CVE-2026-46509

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

@3deye-toolkit/core (>=0.0.1-alpha.7, <=0.0.10), @3deye-toolkit/react-camera (>=0.0.1-alpha.7, <=0.0.10) +89 more potentially affected by CVE-2026-46509 via @ranfdev/deepobj (1.0.2)

@ranfdev/deepobj NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ranfdev/deepobj and may be impacted: - @3deye-toolkit/core =0.0.1-alpha.7, =0.0.1-alpha.7, =0.0.1-alpha.7, =0.0.1-alpha.12, =0.0.1, =0.0.1, =0.0.3, =0.0.6-beta.0,...

CVE-2026-46509

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

CVE-2026-46509 deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

CVE-2026-46509

CVE-2026-46509 affects the deepobj library. The vulnerability is prototype pollution arising when property paths contain proto /constructor/prototype, enabling modification of object prototypes. A fixed version is 1.0.3. Affected information is supported by multiple sources (NVD/NVD entry and CVE...

CVE-2026-46509 deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

CVE-2026-46509

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

deepobj 安全漏洞

DeepObj is a deep object manipulation tool developed by RANFdev’s individual developer. Versions of DeepObj prior to 1.0.3 contained security vulnerabilities; these vulnerabilities could lead to prototype pollution when the property path included proto/constructor/prototype...

GHSA-X7Q7-FCHV-8H2J @ranfdev/deepobj has a Prototype Pollution vulnerability

Impact Prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input...

@3deye-toolkit/core (>=0.0.1-alpha.7, <=0.0.10), @3deye-toolkit/react-camera (>=0.0.1-alpha.7, <=0.0.10) +89 more potentially affected by CVE-2026-46509 via @ranfdev/deepobj (1.0.2)

@ranfdev/deepobj NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @ranfdev/deepobj and may be impacted: - @3deye-toolkit/core =0.0.1-alpha.7, =0.0.1-alpha.7, =0.0.1-alpha.7, =0.0.1-alpha.12, =0.0.1, =0.0.1, =0.0.3, =0.0.6-beta.0,...

@ranfdev/deepobj has a Prototype Pollution vulnerability

Impact Prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input...