CVE-2026-25047: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in sharpred deepHas
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8.
CVE-2026-25047: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in sharpred deepHas
Description
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-01-28T14:50:47.886Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 697bd7ddac06320222bd31af
Added to database: 1/29/2026, 9:57:49 PM
Last updated: 1/29/2026, 9:58:11 PM
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Related Threats
CVE-2026-25063: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in gradle gradle-completion
HighCVE-2026-25061: CWE-787: Out-of-bounds Write in simsong tcpflow
MediumCVE-2026-25046: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') in MoonshotAI kimi-agent-sdk
LowCVE-2026-1340: CWE-94 Improper Control of Generation of Code ('Code Injection') in Ivanti Endpoint Manager Mobile
CriticalCVE-2026-1281: CWE-94 Improper Control of Generation of Code ('Code Injection') in Ivanti Endpoint Manager Mobile
CriticalActions
Need more coverage?
Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.