https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T04:50:08.247075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-29230 cnvd-2019-29230 2026-10-24T04:50:08.250200+00:00 cnvd-2019-29230 https://cve.radiocsirt.org/vuln/euvd-2026-53941 EUVD-2026-53941 2026-10-24T04:50:08.250230+00:00 EUVD-2026-53941 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10750 fkie_cve-2019-10750 2026-10-24T04:50:08.250245+00:00

deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.

 https://cve.radiocsirt.org/vuln/ghsa-8j4w-5fw4-rm27 GHSA-8j4w-5fw4-rm27 — Prototype Pollution in deeply 2026-10-24T04:50:08.250271+00:00

Affected: npm: deeply

Versions of `deeply` prior to 1.0.1 are vulnerable to Prototype Pollution. The package fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.

## Recommendation

Upgrade to version 3.1.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-10750 gsd-2019-10750 2026-10-24T04:50:08.250295+00:00 gsd-2019-10750