CVE-2024-23339

CVE-2024-23339 취약점 개요 CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 node.js 패키지의 프로토타입 오염ProtoType Pollution rebob 프로젝트의 일환 취약점 설명 github advisories hoolock은 번들링 시 작은 크기를 유지하도록 설계된 경량 유틸리티 모음입니다. 버전 2.0.0부터 2.2.1 이전까지, 객체 경로와 관련된 유틸리티 함수get, set, update는 객체 프로토타입에 접근하거나 변경하려는 시도를 차단하지 않았습니다. 버전 2.2.1부터는...

EUVD-2024-0244

Malicious code in bioql PyPI...

CVE-2024-23339

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...

Prototype Pollution

hoolock is vulnerable to Prototype Pollution. The vulnerability is due to utility functions failing to block attempts to access or alter object prototypes. An attacker can modify application data or perform a Denial of Service by exploiting this vulnerability...

CVE-2024-23339

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...

Design/Logic Flaw

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...

CVE-2024-23339

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths "get", "set", and "update" did not block attempts to access or alter object prototypes. Starting in...

CVE-2024-23339 hoolock does not block Prototype pollution with object-path related utilities

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...

CVE-2024-23339 hoolock does not block Prototype pollution with object-path related utilities

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...

CVE-2024-23339

Hoolock versions 2.0.0–2.2.0 expose a Prototype Pollution risk via object-path utilities (get, set, update) that fail to block inherited property access/modification. Starting in 2.2.1 these functions throw a TypeError when attempting to access or alter inherited properties, mitigating the vulner...

hoolock Security Vulnerabilities

hoolock is a lightweight utility suite by elijahharry personal developer. A security vulnerability exists in hoolock version 2.0.0 through versions prior to 2.2.1, which stems from a function related to an object path that does not prevent access to or change of an object prototype...

PT-2024-19818

Name of the Vulnerable Software and Affected Versions hoolock versions 2.0.0 through 2.2.0 Description The issue concerns utility functions related to object paths, specifically get, set, and update, which did not block attempts to access or alter object prototypes. This could potentially allow...

CVE-2024-23339: Improperly Controlled Modification of Object Prototype Attributes

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths get, set, and update did not block attempts to access or alter object prototypes. Starting in version...