CVE-2022-37621

2022-10-2800:00:00

mitre

www.cve.org

cve-2022-37621

resolveshims function

browserify-shim 3.8.15

fullpath variable

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js.

References

github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd9796059798f6c738ea3de8f/lib/resolve-shims.js#L158

github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd9796059798f6c738ea3de8f/lib/resolve-shims.js#L37

github.com/thlorenz/browserify-shim/issues/247