PT-2026-41216 · Npm+1 · @Ranfdev/Deepobj+1

0Xbassia · Published 2026-05-14 · Updated 2026-05-28 · CVE-2026-46509

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions deepobj versions prior to 1.0.3

Description Prototype pollution occurs when property paths contain proto, constructor, or prototype. This issue arises when property paths are exposed as user input, allowing an attacker to modify the prototype of base object classes.

Recommendations Update to version 1.0.3.

Fix

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

CVE-2026-46509

GHSA-X7Q7-FCHV-8H2J

Affected Products

@Ranfdev/Deepobj

Deepobj

References · 5

• https://osv.dev/vulnerability/GHSA-x7q7-fchv-8h2j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46509 · Security Note
• https://github.com/ranfdev/deepobj/security/advisories/GHSA-x7q7-fchv-8h2j · Note
• https://github.com/ranfdev/deepobj · Note
• https://twitter.com/CVEnew/status/2060091963714552038 · Twitter Post