CVE-2024-23339

Name of the Vulnerable Software and Affected Versions hoolock versions 2.0.0 through 2.2.0

Description The issue concerns utility functions related to object paths, specifically get, set, and update, which did not block attempts to access or alter object prototypes. This could potentially allow unauthorized access or modification of inherited properties. Starting in version 2.2.1, these functions throw a TypeError when a user attempts to access or alter inherited properties.

Recommendations For hoolock versions 2.0.0 through 2.2.0, update to version 2.2.1 or later, where the get, set, and update functions will throw a TypeError when attempting to access or alter inherited properties, thus mitigating the issue.