All products

@deepstream/server

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writesCVE-2026-63116 · GHSA-89VX-JH4Q-VG3W @deepstream/server npm High Fix reported
deepstream is vulnerable to prototype pollutionCVE-2026-49252 · GHSA-9V98-6G37-X9G6 @deepstream/server npm Critical Fix reported