CVE-2026-25047 — deepHas vulnerable to Prototype Pollution via constructor.prototype
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm …
Published: 2026-01-29 · CVSS: 9.4 · CVSS 4.0
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7