DevSecOpshoolock - medium issue in >=2.0.0,<2.2.1 - CVE-2024-23339
Description
Package hoolock which comes from package manager npm is found vulnerable with medium severity, please avoid version >=2.0.0,<2.2.1 in order to mitigate.
Recommended Actions
Avoid using versions >=2.0.0,<2.2.1 for package hoolock
Coverage
FortiDevSec 24.3 or later
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-09-30 | 24.30000 |
New
|
None |
| ID | 21349 |
| CVE ID | |
| CWE ID |
CWE-1321 |
| OWASP | |
| Package Source | npm |
| Affected Language | Node |
| Date | Feb 16, 2024 |
| Risk |
|