Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:05:53 +0000 EUVD-2026-244933 https://cve.radiocsirt.org/vuln/euvd-2026-244933 EUVD-2026-244933 https://cve.radiocsirt.org/vuln/euvd-2026-244933 fkie_cve-2024-23339 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23339 <p>hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or alter object prototypes. Starting in version 2.2.1, the `get`, `set` and `update` functions throw a `TypeError` when a user attempts to access or alter inherited properties.</p> <p>hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or alter object prototypes. Starting in version 2.2.1, the `get`, `set` and `update` functions throw a `TypeError` when a user attempts to access or alter inherited properties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23339 GHSA-4c2g-hx49-7h25 — Prototype pollution not blocked by object-path related utilities in hoolock https://cve.radiocsirt.org/vuln/ghsa-4c2g-hx49-7h25 <p><strong>Affected:</strong> npm: hoolock</p> <p>### Impact Utility functions related to object paths (`get`, `set` and `update`) did not block attempts to access or alter object prototypes.</p> <p>### Patches The `get`, `set` and `update` functions will throw a `TypeError` when a user attempts to access or alter inherited properties in versions &gt;=2.2.1.</p> <p><strong>Affected:</strong> npm: hoolock</p> <p>### Impact Utility functions related to object paths (`get`, `set` and `update`) did not block attempts to access or alter object prototypes.</p> <p>### Patches The `get`, `set` and `update` functions will throw a `TypeError` when a user attempts to access or alter inherited properties in versions &gt;=2.2.1.</p> https://cve.radiocsirt.org/vuln/ghsa-4c2g-hx49-7h25 gsd-2024-23339 https://cve.radiocsirt.org/vuln/gsd-2024-23339 gsd-2024-23339 https://cve.radiocsirt.org/vuln/gsd-2024-23339