https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 06:17:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-29230 cnvd-2019-29230 https://cve.radiocsirt.org/vuln/cnvd-2019-29230 https://cve.radiocsirt.org/vuln/euvd-2026-53941 EUVD-2026-53941 https://cve.radiocsirt.org/vuln/euvd-2026-53941 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10750 <p>deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.</p> <p>deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10750 https://cve.radiocsirt.org/vuln/ghsa-8j4w-5fw4-rm27 <p><strong>Affected:</strong> npm: deeply</p> <p>Versions of `deeply` prior to 1.0.1 are vulnerable to Prototype Pollution. The package fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.</p> <p>## Recommendation</p> <p>Upgrade to version 3.1.0 or later.</p> <p><strong>Affected:</strong> npm: deeply</p> <p>Versions of `deeply` prior to 1.0.1 are vulnerable to Prototype Pollution. The package fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.</p> <p>## Recommendation</p> <p>Upgrade to version 3.1.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-8j4w-5fw4-rm27 https://cve.radiocsirt.org/vuln/gsd-2019-10750 gsd-2019-10750 https://cve.radiocsirt.org/vuln/gsd-2019-10750