Approved changes feed: RSS · Atom

cpe:2.3:a:thinkjs:think-helper:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorThinkjs (f5965ca0-c94e-5717-a895-873cafa4476c)
ProductThink Helper (431bfd64-5cee-5dee-ab88-4a2fed1fd7fc)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32736 vulnerable 2026-06-08 05:32:07.926728 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in think-helper
HIGH (7.5)
think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. The vulnerability is patched in version 1.1.3.
Published: 2021-06-30T17:25:09.000Z
Updated: 2024-08-03T23:33:55.799Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.