High severity7.5NVD Advisory· Published Jun 30, 2021· Updated Jun 17, 2026
CVE-2021-32736
CVE-2021-32736
Description
think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. The vulnerability is patched in version 1.1.3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
think-helpernpm | < 1.1.3 | 1.1.3 |
Affected products
3- thinkjs/think-helperv5Range: < 1.1.3
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-vr5m-3h59-7jcpghsaADVISORY
- github.com/thinkjs/think-helper/security/advisories/GHSA-vr5m-3h59-7jcpnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-32736ghsaADVISORY
News mentions
0No linked articles in our index yet.