Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/06/02 4:1 p.m.11 views

CVE-2026-46509

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

8.2CVSS5.8AI score0.00316EPSS
Exploits0References1
NVD
NVD
added 2026/05/28 7:16 p.m.7 views

CVE-2026-46509

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

8.2CVSS0.00316EPSS
Exploits0References1
CVE
CVE
added 2026/05/28 5:52 p.m.16 views

CVE-2026-46509

CVE-2026-46509 affects the deepobj library. The vulnerability is prototype pollution arising when property paths contain proto /constructor/prototype, enabling modification of object prototypes. A fixed version is 1.0.3. Affected information is supported by multiple sources (NVD/NVD entry and CVE...

8.2CVSS5.8AI score0.00316EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/28 5:52 p.m.27 views

CVE-2026-46509 deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

8.2CVSS0.00316EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/28 5:52 p.m.8 views

CVE-2026-46509

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

8.2CVSS5.8AI score0.00316EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/28 5:52 p.m.8 views

CVE-2026-46509 deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3...

8.2CVSS5.8AI score0.00316EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.10 views

deepobj 安全漏洞

DeepObj is a deep object manipulation tool developed by RANFdev’s individual developer. Versions of DeepObj prior to 1.0.3 contained security vulnerabilities; these vulnerabilities could lead to prototype pollution when the property path included proto/constructor/prototype...

8.2CVSS5.8AI score0.00316EPSS
Exploits0References1
OSV
OSV
added 2026/05/14 8:55 p.m.3 views

GHSA-X7Q7-FCHV-8H2J @ranfdev/deepobj has a Prototype Pollution vulnerability

Impact Prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input...

8.2CVSS5.4AI score0.00316EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/05/14 8:55 p.m.10 views

@ranfdev/deepobj has a Prototype Pollution vulnerability

Impact Prototype pollution is possible when property paths contain proto/constructor/prototype. The property path must not be exposed as user input...

8.2CVSS5.4AI score0.00316EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder