2 matches found
CVE-2024-23339
hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...
6.5CVSS6.3AI score0.01007EPSS
SaveExploits0References2
CVE-2024-23339 hoolock does not block Prototype pollution with object-path related utilities
hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...
6.3CVSS6.6AI score0.01007EPSS
SaveExploits0References2
20