CVE-2022-37623

2022-10-3100:00:00

mitre

www.cve.org

cve-2022-37623

resolveshims

browserify-shim

shimpath

vulnerability

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

71.4%

JSON

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.

References

github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd9796059798f6c738ea3de8f/lib/resolve-shims.js#L158

github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd9796059798f6c738ea3de8f/lib/resolve-shims.js#L94

github.com/thlorenz/browserify-shim/issues/248