https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:05:59.251486+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244933 EUVD-2026-244933 2026-10-15T19:05:59.254376+00:00 EUVD-2026-244933 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23339 fkie_cve-2024-23339 2026-10-15T19:05:59.254405+00:00

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or alter object prototypes. Starting in version 2.2.1, the `get`, `set` and `update` functions throw a `TypeError` when a user attempts to access or alter inherited properties.

 https://cve.radiocsirt.org/vuln/ghsa-4c2g-hx49-7h25 GHSA-4c2g-hx49-7h25 — Prototype pollution not blocked by object-path related utilities in hoolock 2026-10-15T19:05:59.254435+00:00

Affected: npm: hoolock

### Impact Utility functions related to object paths (`get`, `set` and `update`) did not block attempts to access or alter object prototypes.

### Patches The `get`, `set` and `update` functions will throw a `TypeError` when a user attempts to access or alter inherited properties in versions >=2.2.1.

 https://cve.radiocsirt.org/vuln/gsd-2024-23339 gsd-2024-23339 2026-10-15T19:05:59.254461+00:00 gsd-2024-23339