CVE-2022-37599

2023-05-2310:40:04

redhat.com

access.redhat.com

cve-2022-37599

webpack loader-utils

interpolatename function

resourcepath variable

regular expression denial of service

mitigation not available

0.003 Low

EPSS

Percentile

69.0%

JSON

A flaw was found in the interpolateName function in interpolateName.js in the webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js. This flaw can lead to a regular expression denial of service (ReDoS).

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.