https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 10:35:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-262474 EUVD-2026-262474 https://cve.radiocsirt.org/vuln/euvd-2026-262474 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41713 <p>deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the &#39;__proto__&#39; property to be edited.</p> <p>deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the &#39;__proto__&#39; property to be edited.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41713 https://cve.radiocsirt.org/vuln/ghsa-653v-rqx9-j85p <p><strong>Affected:</strong> npm: deep-object-diff</p> <p>deep-object-diff before version 1.1.6 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the `__proto__` property to be edited. This issue was fixed in version 1.1.9.</p> <p><strong>Affected:</strong> npm: deep-object-diff</p> <p>deep-object-diff before version 1.1.6 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the `__proto__` property to be edited. This issue was fixed in version 1.1.9.</p> https://cve.radiocsirt.org/vuln/ghsa-653v-rqx9-j85p https://cve.radiocsirt.org/vuln/gsd-2022-41713 gsd-2022-41713 https://cve.radiocsirt.org/vuln/gsd-2022-41713