CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

EUVD-2025-37617

Information disclosure while registering commands from clients with diag through diagHal...

MAL-2025-37617 Malicious code in ukit (npm)

The package ukit was found to contain malicious code...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37617 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37617 Source advisory: GHSA-866W-WM4H-95C6...

CVE-2022-37617

creationtimestamp| type| source ---|---|--- 2022-10-12 02:26:37+00:00| seen| https://t.me/cibsecurity/51242...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution in thlorenz browserify-shim 3.8.15, due to the k variable handling in resolve-shims.js (resolveShims function). Connected sources list this as a vulnerability in the browserify-shim package, with the issue affecting resolution logic in resolve-shims.js and enabling potential p...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @achingbrain/slides (>=0.0.0, <=0.0.3) +1589 more potentially affected by CVE-2022-37617 via browserify-shim (>=2.0.8, <=3.8.14)

browserify-shim NPM version =2.0.8, =0.0.0-aj-alpha.9, =0.0.0, =0.1.2-beta.1, =1.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0-alpha.2, =1.0.6, =1.0.43, =1.0.44, =4.0.0-beta.6, =4.5.0-beta.7 and more Source cves: CVE-2022-37617 Source advisory: MEND:CVE-2022-37617...

CVE-2021-37617

creationtimestamp| type| source ---|---|--- 2021-08-18 22:17:05+00:00| seen| https://t.me/cibsecurity/27561...

CVE-2021-37617

Summary of CVE-2021-37617 : The Nextcloud Desktop Client (Windows) contains a vendor- and user-controlled uninstall search path flaw. In versions 3.0.3 through 3.2.4, the client searches for an Uninstall.exe file in a folder writable by regular users. A malicious user could place a crafted Uninst...