pypi package report

Is deap safe?

1 known vulnerability, worst severity CRITICAL.

cvss

9.0

how bad it is if exploited, out of 10

epss

1.4%

chance of exploitation in the next 30 days

xyz score

4.7

CyberXYZ composite, out of 10

fig. 01 — GHSA-xg47-r67p-vhv5, the advisory selected below

// advisories

GHSA-xg47-r67p-vhv5

CRITICALCVE-2018-3749

The utilities function in all versions < 1.0.1 of the deap node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.

Affected: < 1.0.1
Fixed in: 1.0.1
Published: 2022-05-14
Source: github

GHSA NVD MITRE reference reference

// dependencies

2 direct, 1 carrying known advisories, worst CRITICAL

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 01:45 UTC. The most recent advisory here was published 2022-05-14. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is deap safe? pypi package security report | CyberXYZ