Lucene search
+L

1955 matches found

Github Security Blog
Github Security Blog
•added 2022/10/13 12:00 p.m.•89 views

Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js...

9.8CVSS8.9AI score0.03503EPSS
SaveExploits1References16Affected Software1
OSV
OSV
•added 2022/10/13 12:00 p.m.•44 views

GHSA-76P3-8JX3-JPFQ Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js...

9.8CVSS5.9AI score0.03503EPSS
SaveExploits1References16
OSV
OSV
•added 2022/10/12 8:15 p.m.•14 views

DEBIAN-CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS8.1AI score0.03503EPSS
SaveExploits1References1
NVD
NVD
•added 2022/10/12 8:15 p.m.•22 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS0.03503EPSS
SaveExploits1References9
attackerkb
attackerkb
•added 2022/10/12 8:15 p.m.•10 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.7AI score0.03503EPSS
SaveExploits1References10
Prion
Prion
•added 2022/10/12 8:15 p.m.•31 views

Code injection

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js...

7.5CVSS9.2AI score0.03503EPSS
SaveExploits1References9Affected Software2
UbuntuCve
UbuntuCve
•added 2022/10/12 8:15 p.m.•57 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.8AI score0.03503EPSS
SaveExploits1References4
OSV
OSV
•added 2022/10/12 8:15 p.m.•15 views

UBUNTU-CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.8AI score0.03503EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
•added 2022/10/12 12:00 p.m.•11 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14948 more potentially affected by CVE-2022-37599 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

7.5CVSS6.5AI score0.02761EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/10/12 12:00 p.m.•10 views

@alfresco/adf-testing (6.0.0-A.2-8258), @angular-architects/build-angular (14.2.0-next.0) +54 more potentially affected by CVE-2022-37599 via loader-utils (>=3.0.0, <=3.2.0)

loader-utils NPM version =3.0.0, =0.9.2, =13.0.0-rc.2, =1.0.0, =1.3.1, =13.0.0-rc.18, =3.9.0-beta.1, =13.0.0, =0.1.0, =1.7.4, =4.7.1-beta.0, =4.7.1-beta.0, =9.1.3-beta.1 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

7.5CVSS6.2AI score0.02761EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/12 12:00 a.m.•3 views

CVE-2022-37601: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS7.7AI score0.03503EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/10/12 12:00 a.m.•10 views

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in webpack loader-utils version 2.0.0, which stems from the discovery of a prototype contamination vulnerability contained in the parseQuerys function of parseQuery.js...

9.8CVSS7.2AI score0.03503EPSS
SaveExploits1References14
Vulnrichment
Vulnrichment
•added 2022/10/12 12:00 a.m.•30 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

6.6AI score0.03503EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2022/10/12 12:00 a.m.•16 views

PT-2022-24022

Name of the Vulnerable Software and Affected Versions loader-utils versions prior to 1.4.1 loader-utils versions prior to 2.0.3 Description The issue is related to a prototype pollution vulnerability in the parseQuery function within parseQuery.js in webpack loader-utils. This vulnerability is...

9.8CVSS7.9AI score0.03503EPSS
SaveExploits1References35
Cvelist
Cvelist
•added 2022/10/12 12:00 a.m.•50 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.5AI score0.03503EPSS
SaveExploits1References9
CVE
CVE
•added 2022/10/12 12:00 a.m.•425 views

CVE-2022-37601

Prototype pollution in webpack loader-utils: parseQuery.js via the name variable affects all versions prior to 1.4.1 and 2.0.3. CVSS v3.1 base score 9.8 (CRITICAL) with high impact on confidentiality, integrity, and availability. Remediation: upgrade loader-utils to 1.4.1+ or 2.0.3+ (patched vers...

9.8CVSS9.1AI score0.03503EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2022/10/12 12:00 a.m.•44 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.2AI score
SaveExploits0References11
Debian CVE
Debian CVE
•added 2022/10/12 12:00 a.m.•54 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS8.5AI score0.03503EPSS
SaveExploits1
OSV
OSV
•added 2022/10/11 7:15 p.m.•11 views

DEBIAN-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS7.4AI score0.02761EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/11 7:15 p.m.•32 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS0.02761EPSS
SaveExploits0References7
Rows per page
Query Builder