Skip to content

PatchFirst · Latest vulnerabilities

deephas vulnerabilities

Vulnerabilities published for deephas in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2026-25047
Critical · CVSS 9.4EPSS 0.8%Public exploitFix available
deepHas vulnerable to Prototype Pollution via constructor.prototype
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8.
deephas Node.js
- Update to 1.0.8
Published January 29, 2026Updated February 2, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2020-28271
Critical · CVSS 9.8EPSS 3.41%No fix published
CVE-2020-28271
Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.
deephas Node.js
Published November 12, 2020Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →