CVE-2026-25047

This repository contains a functional Python-based PoC demonstrating prototype pollution in the 'deephas' npm package (versions <= 1.0.7). The exploit leverages unsafe recursive property assignment to pollute Object.prototype via constructor.prototype and __proto__ paths, potentially leading to RCE or DoS.

This repository contains a functional Python-based PoC demonstrating prototype pollution in the 'deephas' npm package (versions <= 1.0.7), leading to arbitrary code execution or DoS via unsafe recursive property assignment.