Skip to content
OpenAdvisories

Package · npm

hoolock

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2024-23339 Public exploit

    hoolock does not block Prototype pollution with object-path related utilities

    hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or a…

    elijahharry hoolock hoolock npm