Lucene search
+L

80 matches found

vulnersOsv
vulnersOsv
•added 2022/10/14 7:00 p.m.•5 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14937 more potentially affected by CVE-2022-37603 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

7.5CVSS6.5AI score0.02198EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/10/14 7:00 p.m.•5 views

@alfresco/adf-testing (6.0.0-A.2-8258), @angular-architects/build-angular (14.2.0-next.0) +54 more potentially affected by CVE-2022-37603 via loader-utils (>=3.0.0, <=3.2.0)

loader-utils NPM version =3.0.0, =0.9.2, =13.0.0-rc.2, =1.0.0, =1.3.1, =13.0.0-rc.18, =3.9.0-beta.1, =13.0.0, =0.1.0, =1.7.4, =4.7.1-beta.0, =4.7.1-beta.0, =9.1.3-beta.1 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

7.5CVSS6AI score0.02198EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/10/14 7:00 p.m.•9 views

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8767 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

7.5CVSS6.5AI score0.02198EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/10/14 7:00 p.m.•75 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS8.1AI score0.02198EPSS
SaveExploits1References12Affected Software1
NVD
NVD
•added 2022/10/14 4:15 p.m.•28 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS0.02198EPSS
SaveExploits1References6
Prion
Prion
•added 2022/10/14 4:15 p.m.•31 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02198EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2022/10/14 4:15 p.m.•10 views

UBUNTU-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02198EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2022/10/14 4:15 p.m.•68 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02198EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/10/14 12:00 a.m.•10 views

PT-2022-24024

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 webpack loader-utils versions prior to 1.4.2 webpack loader-utils versions prior to 2.0.4 webpack loader-utils versions prior to 3.2.1 Description A Regular expression denial of service ReDoS flaw was found i...

7.5CVSS6.6AI score0.02198EPSS
SaveExploits1References27
Vulnrichment
Vulnrichment
•added 2022/10/14 12:00 a.m.•8 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.4AI score0.02198EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/10/14 12:00 a.m.•41 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02198EPSS
SaveExploits1References6
CVE
CVE
•added 2022/10/14 12:00 a.m.•321 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.02198EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2022/10/14 12:00 a.m.•54 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02198EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/10/13 12:00 p.m.•6 views

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8759 more potentially affected by CVE-2022-37601 via loader-utils (>=2.0.0, <=2.0.2)

loader-utils NPM version =2.0.0, =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

9.8CVSS6.9AI score0.02851EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/10/13 12:00 p.m.•5 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14935 more potentially affected by CVE-2022-37601 via loader-utils (>=1.0.0, <=1.4.0)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37601 Source advisory: OSV:GHSA-76P3-8JX3-JPFQ...

9.8CVSS6.9AI score0.02851EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/10/13 12:00 p.m.•88 views

Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js...

9.8CVSS8.9AI score0.02851EPSS
SaveExploits1References16Affected Software1
OSV
OSV
•added 2022/10/12 8:15 p.m.•14 views

AZL-26161 CVE-2022-37601 affecting package reaper for versions less than 3.1.1-3

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.7AI score0.02851EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/12 8:15 p.m.•12 views

UBUNTU-CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.8AI score0.02851EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/10/12 8:15 p.m.•53 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.8AI score0.02851EPSS
SaveExploits1References4
Prion
Prion
•added 2022/10/12 8:15 p.m.•28 views

Code injection

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js...

7.5CVSS9.2AI score0.02851EPSS
SaveExploits1References9Affected Software2
Rows per page
Query Builder