https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:54:28.366837+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-68183 EUVD-2026-68183 2026-10-03T20:54:28.371957+00:00 EUVD-2026-68183 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16486 fkie_cve-2018-16486 2026-10-03T20:54:28.372005+00:00

A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.

 https://cve.radiocsirt.org/vuln/ghsa-pjxw-22xf-6pwc GHSA-pjxw-22xf-6pwc — Prototype Pollution in defaults-deep 2026-10-03T20:54:28.372061+00:00

Affected: npm: defaults-deep

All versions of `defaults-deep` are vulnerable to prototype pollution. Provided certain input `defaults-deep` can add or modify properties of the `Object` prototype. These properties will be present on all objects.

## Recommendation

As no patch is currently available for this vulnerability it is our recommendation to select another module that can provide this functionality.

 https://cve.radiocsirt.org/vuln/gsd-2018-16486 gsd-2018-16486 2026-10-03T20:54:28.372110+00:00 gsd-2018-16486