@deepstream/server vulnerabilities (npm)

2 vulnerabilities.

• @deepstream/server npm deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes CVE-2026-63116 Fix available 8.8 HighSeptember 21, 2026
• @deepstream/server npm deepstream is vulnerable to prototype pollution CVE-2026-49252 Fix available 9.9 CriticalJune 18, 2026