Lucene search
+L

1617 matches found

RedhatCVE
RedhatCVE
added 2022/11/28 6:30 p.m.76 views

CVE-2022-37601

A prototype pollution vulnerability was found in the parseQuery function in parseQuery.js in the webpack loader-utils via the name variable in parseQuery.js. This flaw can lead to a denial of service or remote code execution...

8.1CVSS5.6AI score0.02675EPSS
SaveExploits1References4
Veracode
Veracode
added 2022/11/16 5:59 a.m.31 views

Prototype Pollution

node-loader-utils is vulnerable to Prototype Pollution. The vulnerability exists in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js which allows an attacker to cause a prototype pollution...

9.8CVSS8.6AI score0.02675EPSS
SaveExploits1References10Affected Software5
OSV
OSV
added 2022/11/14 12:25 a.m.9 views

MAL-2022-7101 Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/11/14 12:25 a.m.5 views

Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2022/11/07 10:56 a.m.106 views

CVE-2022-37603

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

7.5CVSS3.4AI score0.02087EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/10/14 7:0 p.m.67 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS8.1AI score0.02087EPSS
SaveExploits1References12Affected Software1
OSV
OSV
added 2022/10/14 7:0 p.m.13 views

GHSA-3RFM-JHWJ-7488 loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS6.5AI score0.02087EPSS
SaveExploits1References12
OSV
OSV
added 2022/10/14 4:15 p.m.6 views

DEBIAN-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.7AI score0.02087EPSS
SaveExploits1References1
NVD
NVD
added 2022/10/14 4:15 p.m.24 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS0.02087EPSS
SaveExploits1References6
Prion
Prion
added 2022/10/14 4:15 p.m.28 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02087EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/10/14 4:15 p.m.5 views

UBUNTU-CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02087EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/10/14 4:15 p.m.60 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02087EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.5 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.4AI score0.02087EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.6 views

PT-2022-24024

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 webpack loader-utils versions prior to 1.4.2 webpack loader-utils versions prior to 2.0.4 webpack loader-utils versions prior to 3.2.1 Description A Regular expression denial of service ReDoS flaw was found i...

7.5CVSS6.6AI score0.02087EPSS
SaveExploits1References27
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.30 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02087EPSS
SaveExploits1References6
OSV
OSV
added 2022/10/14 12:0 a.m.26 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS7.3AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2022/10/14 12:0 a.m.49 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02087EPSS
SaveExploits1
CVE
CVE
added 2022/10/14 12:0 a.m.310 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.02087EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/10/13 12:0 p.m.28 views

GHSA-76P3-8JX3-JPFQ Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js...

9.8CVSS5.9AI score0.02675EPSS
SaveExploits1References16
Github Security Blog
Github Security Blog
added 2022/10/13 12:0 p.m.81 views

Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js...

9.8CVSS8.9AI score0.02675EPSS
SaveExploits1References16Affected Software1
Rows per page
Query Builder