deepstreamIO vulnerabilities
We track 2 vulnerabilities in deepstreamIO products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2026.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest deepstreamIO vulnerabilities
- 8.8 High severity
deepstream.io: Missing Authorization
deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. From 10.1.0 until 10.1.1, src/services/permission/valve/rules-map.ts omits RECORD_ACTION.PATCH_MULTI from RULES_MAP. When an authenticated user
- 9.9 Critical severity
deepstream.io: Improperly Controlled Modification of Object Prototype Attributes
deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. Versions prior to 10.0.5 are vulnerable to Prototype Pollution. Exploitation can lead to potential privilege escalation from any authenticated u