Approved changes feed: RSS · Atom
cpe:2.3:a:elijahharry:hoolock:*:*:*:*:*:node.js:*:*part: a version: * update: *
| Vendor | Elijahharry (1defd298-324f-58b3-812b-dd20413125b2) |
|---|---|
| Product | Hoolock (356bbb64-655f-54a0-b692-509bca1e4267) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/elijahharry/hoolock |
purl2cpe | 2026-06-01 10:11:20.656252 |
pkg:npm/hoolock |
purl2cpe | 2026-06-01 10:11:20.656254 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23339 |
vulnerable | 2026-06-08 06:29:37.320752 |
hoolock does not block Prototype pollution with object-path related utilities
MEDIUM (6.3)
hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or alter object prototypes. Starting in version 2.2.1, the `get`, `set` and `update` functions throw a `TypeError` when a user attempts to access or alter inherited properties.
Published: 2024-01-22T22:54:53.096Z
Updated: 2025-06-17T21:19:25.952Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.