https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:27:28.740142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-28132 EUVD-2026-28132 2026-10-09T17:27:28.742708+00:00 EUVD-2026-28132 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32736 fkie_cve-2021-32736 2026-10-09T17:27:28.742747+00:00

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. The vulnerability is patched in version 1.1.3.

 https://cve.radiocsirt.org/vuln/ghsa-vr5m-3h59-7jcp GHSA-vr5m-3h59-7jcp — Prototype Pollution in think-helper 2026-10-09T17:27:28.742783+00:00

Affected: npm: think-helper

### Impact

The software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

### Patches

`think-helper@1.1.3` patched it, anyone used `think-helper` should upgrade to `>=1.1.3` version.

### References

https://cwe.mitre.org/data/definitions/1321.html

### For more information If you have any questions or comments about this advisory: * Open an issue in [thinkjs/thinkjs](https://github.com/thinkjs/thinkjs) * Email us at [i@imnerd.org](mailto:i@imnerd.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-32736 gsd-2021-32736 2026-10-09T17:27:28.742817+00:00 gsd-2021-32736