CVE-2024-23339

Hoolock versions 2.0.0–2.2.0 expose a Prototype Pollution risk via object-path utilities (get, set, update) that fail to block inherited property access/modification. Starting in 2.2.1 these functions throw a TypeError when attempting to access or alter inherited properties, mitigating the vulner...