https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T10:35:41.763563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262474 EUVD-2026-262474 2026-10-17T10:35:41.773322+00:00 EUVD-2026-262474 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41713 fkie_cve-2022-41713 2026-10-17T10:35:41.773361+00:00

deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the '__proto__' property to be edited.

 https://cve.radiocsirt.org/vuln/ghsa-653v-rqx9-j85p GHSA-653v-rqx9-j85p — deep-object-diff vulnerable to Prototype Pollution 2026-10-17T10:35:41.773395+00:00

Affected: npm: deep-object-diff

deep-object-diff before version 1.1.6 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the `__proto__` property to be edited. This issue was fixed in version 1.1.9.

 https://cve.radiocsirt.org/vuln/gsd-2022-41713 gsd-2022-41713 2026-10-17T10:35:41.773420+00:00 gsd-2022-41713