CVE-2024-39008: Robinweser Fast-Loops

Critical severity, CVSS 10.0. EPSS: 0.9% chance of exploitation in the next 30 days.

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Affected products

• Robinweser Fast-Loops: version 1.1.3 only

Published 2024-07-01. Last modified 2026-06-17.