Skip to content
OpenAdvisories

Product · deepstreamIO

deepstream.io

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-49252

    deepstream is vulnerable to prototype pollution

    deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. Versions prior to 10.0.5 are vulnerable to Prototype Pollution. Exploitation can lead to potential privilege escalation from any authenticated …

    deepstreamIO deepstream.io @deepstream/server npm