HIGH8.2

GHSA-x7q7-fchv-8h2j

@ranfdev/deepobj has a Prototype Pollution vulnerability

Quick fix

GHSA-x7q7-fchv-8h2j — @ranfdev/deepobj: upgrade to the fixed version with the command below.

npm install @ranfdev/deepobj@1.0.3

Details

### Impact Prototype pollution is possible when property paths contain `__proto__`/`constructor`/`prototype`. The property path must not be exposed as user input.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@ranfdev/deepobj

Introduced in: 0Fixed in: 1.0.3

Fixnpm install @ranfdev/deepobj@1.0.3

References

https://github.com/ranfdev/deepobj/security/advisories/GHSA-x7q7-fchv-8h2j[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2026-46509[ADVISORY]
https://github.com/ranfdev/deepobj[PACKAGE]