CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37617 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37617 Source advisory: GHSA-866W-WM4H-95C6...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution in thlorenz browserify-shim 3.8.15, due to the k variable handling in resolve-shims.js (resolveShims function). Connected sources list this as a vulnerability in the browserify-shim package, with the issue affecting resolution logic in resolve-shims.js and enabling potential p...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @achingbrain/slides (>=0.0.0, <=0.0.3) +1589 more potentially affected by CVE-2022-37617 via browserify-shim (>=2.0.8, <=3.8.14)

browserify-shim NPM version =2.0.8, =0.0.0-aj-alpha.9, =0.0.0, =0.1.2-beta.1, =1.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0-alpha.2, =1.0.6, =1.0.43, =1.0.44, =4.0.0-beta.6, =4.5.0-beta.7 and more Source cves: CVE-2022-37617 Source advisory: MEND:CVE-2022-37617...