Prototype Pollution in deap

Description

Versions of deap before 1.0.1 are vulnerable to prototype pollution.

Recommendation

Update the deap package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.0.1
• Patched version(s): 1.0.1

References

• GHSA-xrmp-99wj-p6jc
• hackerone.com
• www.npmjs.com
• snyk.io
• CWE-400

Related Issues

• Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions (GHSA-xxjr-mmjv-4gpg) - CVE-2025-13465
• Prototype Pollution in lodash.merge (GHSA-h726-x36v-rx45) - Vulnerability
• Prototype Pollution in lodash.mergewith (GHSA-5947-m4fg-xhqg) - Vulnerability
• Prototype Pollution in lodash.mergewith - Vulnerability

Tags:

npm

deap