353 matches found
browserify-shim 品安全漏洞
browserify-shim is the thlorenz personal developer's tool for making CommonJS-incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which originates from a prototype chain contamination that can be caused by an attacker via the shimPath variable in the...
CVE-2022-37623
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js...
thlorenz browserify-shim vulnerable to prototype pollution
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37621 via browserify-shim (>=3.1.5, <=3.8.14)
browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37621 Source advisory: OSV:GHSA-R737-347M-WQC7...
GHSA-R737-347M-WQC7 thlorenz browserify-shim vulnerable to prototype pollution
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
CVE-2022-37621
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
browserify-shim 安全漏洞
browserify-shim is used by thlorenz individual developers to make CommonJS incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which stems from a prototype contamination vulnerability in the resolveShims function in resolve-shims.js...
CVE-2022-37621
CVE-2022-37621 affects thlorenz browserify-shim 3.8.15, with a prototype pollution in resolve-shims.js (resolveShims) exploitable via the fullPath variable. Risk details from sources indicate a CRITICAL impact (CVSSv3.1: 9.8) and network access are possible, with no user interaction required. Rem...
CVE-2022-37621
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
CVE-2022-37621
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
CVE-2022-37621
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
CVE-2022-37621: Improperly Controlled Modification of Object Prototype Attributes
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
PT-2022-24032 · Unknown · Browserify-Shim
Name of the Vulnerable Software and Affected Versions: browserify-shim version 3.8.15 Description: The issue is related to a prototype pollution vulnerability in the resolveShims function, located in resolve-shims.js. This vulnerability is exploitable via the fullPath variable in resolve-shims.js...
Prototype Pollution
browserify-shim is vulnerable to prototype pollution. The vulnerability exists due to the separateExposeGlobals function in resolve-shims.js, which doesn’t restrict proto or constructor keys in the supplied shim which allows an attacker to modify object prototypes...
thlorenz browserify-shim vulnerable to prototype pollution
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...
GHSA-866W-WM4H-95C6 thlorenz browserify-shim vulnerable to prototype pollution
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...
@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37617 via browserify-shim (>=3.1.5, <=3.8.14)
browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37617 Source advisory: OSV:GHSA-866W-WM4H-95C6...
CVE-2022-37617
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...
