Hello.js Project Hello.js 1.18.6 for Node.js
Approved changes feed: RSS · Atom
cpe:2.3:a:hello.js_project:hello.js:1.18.6:*:*:*:*:node.js:*:*part: a version: 1.18.6 update: *
| Vendor | Hello.Js Project (6bce304a-203f-5fae-86d6-597766a7ea70) |
|---|---|
| Product | Hello.Js (2f564c71-003e-519b-b0fd-b6cb8c9f9141) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mrswitch/hello.js |
purl2cpe | 2026-06-01 10:11:23.321146 |
pkg:npm/hello.js |
purl2cpe | 2026-06-01 10:11:23.321147 |
pkg:sourceforge/hello-js.mirror |
purl2cpe | 2026-06-01 10:11:23.321149 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-26505 |
vulnerable | 2026-06-08 05:30:44.817754 |
Details available
Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function.
Published: 2023-08-11T00:00:00.000Z
Updated: 2024-10-09T17:48:29.673Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.