highCVSS 8.2Vulnerability
CVE-2026-46509
### Impact Prototype pollution is possible when property paths contain `__proto__`/`constructor`/`prototype`. The property path must not be exposed as user input.
Properties
- severity
- high
- summary
- Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @ranfdev/deepobj
- epss_score
- 0.00316
- cvss_score
- 8.2
- ghsa_published
- 2026-05-14T20:55:24Z
- source_url
- https://github.com/advisories/GHSA-x7q7-fchv-8h2j
- ghsa_updated
- 2026-05-14T20:55:25Z
- ghsa_id
- GHSA-x7q7-fchv-8h2j
- cve_id
- CVE-2026-46509
- cvss_vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
- is_ghsa_only
- false
- epss_percentile
- 0.24167
Related Entities (5)
ENRICHED_BY (1)
→[Source]FIRST EPSS
VULNERABLE_TO (1)
←[Software]npm/@ranfdev/deepobj
AFFECTS (1)
→[Software]npm/@ranfdev/deepobj
HAS_WEAKNESS (1)
→[Weakness]Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
REPORTED_BY (1)
→[Source]GitHub Advisory Database
Explore deeper with Ninja Signal's threat intelligence graph