ExploitPublished 30 Apr 2026

deephas 1.0.7 · Prototype Pollution

Source Exploit-DB RSS Feed

Severity

Medium

Rated by Threat Radar

Data as of 6 May 2026, 02:38 UTC

What to do

AI-suggested

Until a patch is available, avoid using deephas 1.0.7 in production environments or apply manual code review and validation to mitigate prototype pollution risks.

Description

deephas 1.0.7 - Prototype Pollution

Impact

An attacker exploiting this prototype pollution vulnerability could potentially alter the behavior of applications using deephas 1.0.7 by injecting or modifying properties on JavaScript object prototypes. This could lead to security issues such as data corruption or logic bypass depending on how the affected application uses the vulnerable library. No confirmed active exploitation has been reported.

Indicators of compromise

Exploit source code

Exploit code for deephas 1.0.7 - Prototype Pollution5,207 characters

# Exploit Title: deephas 1.0.7 - Prototype Pollution 
# Google Dork: N/A
# Date: 2026-02-01
# Exploit Author: Mohammed Idrees Banyamer
# Author Country: Jordan
# Instagram: @banyamer_security
# Vendor Homepage: https://www.npmjs.com/package/deephas
# Software Link: https://github.com/sharpred/deepHas
# Version: <= 1.0.7 (fixed in 1.0.8 and later)
# Tested on: Node.js 16 / 18 / 20 (Linux / macOS / Windows)
# CVE : CVE-2026-25047
# GHSA: GHSA-2733-6c58-pf27
# CVSS: 9.8 (Critical)
#
# Description:
…

References

Community reviews

Loading reviews…