Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@deepstream/server

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical, 1 high
Weekly downloads
1,423
Dependents
0
Registry
npm

Advisories 2

  • deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes

    Affected: from 10.1.0, fixed in 10.1.1.

  • CVE-2026-49252Critical 9.9

    deepstream is vulnerable to prototype pollution

    Affected: fixed in 10.0.5.