npm/deephas CVE-2026-25047: high 8.8, EPSS 0.80%
deepHas vulnerable to Prototype Pollution via constructor.prototype
Action: Upgrade deephas to 1.0.8 or later.
npm i deephas@1.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.8 | - |
Fixed versions
| 1.0.8 |
Sources
- osv: GHSA-2733-6c58-pf27
- nvd: CVE-2026-25047
- https://github.com/sharpred/deepHas/security/advisories/GHSA-2733-6c58-pf27
- https://github.com/sharpred/deepHas/commit/8097fafd3776c613d8066546653e0d2c7b5fc465
- https://github.com/sharpred/deepHas
CVE-2026-25047 · published · modified · JSON