CVE-2024-39015: Cafebazaar Hod

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Affected products

• Cafebazaar Hod: version 0.414 only

Published 2024-07-01. Last modified 2026-06-17.