VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jan 22, 2024· Updated Jun 17, 2026

CVE-2024-23339

CVE-2024-23339

Description

hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (get, set, and update) did not block attempts to access or alter object prototypes. Starting in version 2.2.1, the get, set and update functions throw a TypeError when a user attempts to access or alter inherited properties.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
hoolocknpm
>= 2.0.0, < 2.2.12.2.1

Affected products

3
  • Elijahharry/Hoolock2 versions
    cpe:2.3:a:elijahharry:hoolock:*:*:*:*:*:node.js:*:*+ 1 more
    • cpe:2.3:a:elijahharry:hoolock:*:*:*:*:*:node.js:*:*range: >=2.0.0,<2.2.1
    • (no CPE)range: >= 2.0.0, < 2.2.1
  • ghsa-coords
    pkg:npm/hoolock
    Range: >= 2.0.0, < 2.2.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.