https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:56:12.953318+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-23339 CVE-2024-23339 — hoolock does not block Prototype pollution with object-path related utilities 2026-10-15T17:56:12.954417+00:00

Affected: elijahharry hoolock

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or alter object prototypes. Starting in version 2.2.1, the `get`, `set` and `update` functions throw a `TypeError` when a user attempts to access or alter inherited properties.