CVE-2024-23339

CVE-2024-23339 취약점 개요 CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 node.js 패키지의 프로토타입 오염ProtoType Pollution rebob 프로젝트의 일환 취약점 설명 github advisories hoolock은 번들링 시 작은 크기를 유지하도록 설계된 경량 유틸리티 모음입니다. 버전 2.0.0부터 2.2.1 이전까지, 객체 경로와 관련된 유틸리티 함수get, set, update는 객체 프로토타입에 접근하거나 변경하려는 시도를 차단하지 않았습니다. 버전 2.2.1부터는...

CVE-2024-23339

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...

CVE-2024-23339 hoolock does not block Prototype pollution with object-path related utilities

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...