deephas
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting deephaspage 1 of 1
- CVE-2020-28271CRITICALCVSS 9.8EG 9.82020-11-12
Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.
- CVE-2026-25047HIGHCVSS 8.8EG 8.8✓ Fixed in 1.0.82026-01-29
deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavi…
Check whether deephas is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for deephas CVEs against the assets you own.
Start Free Scan →