Lucene search
K

75 matches found

NVD
NVD
added 2022/10/14 4:15 p.m.16 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS0.01331EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2022/10/14 4:15 p.m.49 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.01331EPSS
Exploits1References1
Prion
Prion
added 2022/10/14 4:15 p.m.25 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.01331EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2022/10/14 4:15 p.m.0 views

UBUNTU-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.01331EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.4 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.4AI score0.01331EPSS
Exploits1References6
CVE
CVE
added 2022/10/14 12:0 a.m.291 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.01331EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.19 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.01331EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2022/10/14 12:0 a.m.30 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.01331EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.3 views

PT-2022-24024 · Webpack +1 · Webpack Loader-Utils +1

Name of the Vulnerable Software and Affected Versions: webpack loader-utils version 2.0.0 webpack loader-utils versions prior to 1.4.2 webpack loader-utils versions prior to 2.0.4 webpack loader-utils versions prior to 3.2.1 Description: A Regular expression denial of service ReDoS flaw was found...

7.5CVSS6.4AI score0.01331EPSS
Exploits1References24
vulnersOsv
vulnersOsv
added 2022/10/13 12:0 p.m.2 views

0xgank-tea-advice-pull (=1.0.0), 0xgank-tea-balance-pencil (=1.0.0) +8765 more potentially affected by CVE-2022-37601 via loader-utils (>=2.0.0 <=2.0.2)

loader-utils NPM version =2.0.0, =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0...

9.8CVSS7.1AI score0.18844EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/10/13 12:0 p.m.72 views

Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js...

9.8CVSS8.9AI score0.18844EPSS
Exploits1References16Affected Software1
vulnersOsv
vulnersOsv
added 2022/10/13 12:0 p.m.2 views

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 06demo-1 (=1.0.0) +34017 more potentially affected by CVE-2022-37601 via loader-utils (>=0.1.2 <=1.4.0)

loader-utils NPM version =0.1.2, =1.0.1, =1.1.0 - 06demo-1 =1.0.0 - 0726react =0.1.1 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 -...

9.8CVSS7.1AI score0.18844EPSS
Exploits1
OSV
OSV
added 2022/10/12 8:15 p.m.2 views

AZL-26161 CVE-2022-37601 affecting package reaper for versions less than 3.1.1-3

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.7AI score0.18844EPSS
Exploits1References1
OSV
OSV
added 2022/10/12 8:15 p.m.30 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS9.2AI score
Exploits0References9
OSV
OSV
added 2022/10/12 8:15 p.m.0 views

UBUNTU-CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.8AI score0.18844EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2022/10/12 8:15 p.m.37 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.8AI score0.18844EPSS
Exploits1References4
Prion
Prion
added 2022/10/12 8:15 p.m.21 views

Code injection

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js...

7.5CVSS9.2AI score0.18844EPSS
Exploits1References9Affected Software2
Github Security Blog
Github Security Blog
added 2022/10/12 12:0 p.m.48 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS7.2AI score0.04206EPSS
Exploits0References12Affected Software1
vulnersOsv
vulnersOsv
added 2022/10/12 12:0 p.m.2 views

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +14904 more potentially affected by CVE-2022-37599 via loader-utils (>=1.0.0 <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

7.5CVSS7.1AI score0.04206EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/10/12 12:0 p.m.2 views

@alfresco/adf-testing (=6.0.0-A.2-8258), @angular-architects/build-angular (=14.2.0-next.0) +54 more potentially affected by CVE-2022-37599 via loader-utils (>=3.0.0 <=3.2.0)

loader-utils NPM version =3.0.0, =0.9.2, =13.0.0, =1.0.0, =1.3.1, =13.0.0-rc.18, =3.9.0, =13.0.0, =0.1.0, =1.7.4, =4.7.1-beta.0, =4.7.1-beta.0, =9.1.3-beta.1 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

7.5CVSS7.1AI score0.04206EPSS
Exploits0
Rows per page
Query Builder