CVE-2026-25047
deepHas vulnerable to Prototype Pollution via constructor.prototype
Résumé
deepHas vulnerable to Prototype Pollution via constructor.prototype
Description d'origine
La description telle que publiée par la source (souvent en anglais).
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com