PT-2022-24021

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 Description A Regular expression denial of service ReDoS flaw was found in the interpolateName function in interpolateName.js via the resourcePath variable. This issue could be exploited by sending crafted...

CVE-2022-37599

CVE-2022-37599: A ReDoS in Function interpolateName (interpolateName.js) in webpack loader-utils 2.0.0 is triggered via the resourcePath variable in interpolateName.js. The Nessus/Confluence entry explicitly ties this CVE to affected Confluence deployments using webpack loader-utils, describing a...

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in webpack loader-utils version 2.0.0, which stems from the discovery of a regular expression denial of service ReDoS vulnerability contained in the interpolateName function of interpolateName...

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

Security Bulletin: Multiple vulnerabilities in React, webpack and Node.js modules affect Tivoli Netcool/OMNIbus WebGUI

Summary Fix is available for vulnerabilities in React, webpack and Node.js modules affecting Tivoli Netcool/OMNIbus WebGUI. The modules are used by Tivoli Netcool/OMNIbus WebGUI as part of its web client components. The fix updates the modules to the fixed versions. Vulnerability Details...

Semrush: Exposure of service tokens to webpack bundle

Service tokens were exposed in a webpack bundle during the build process due to environment variables being accidentally included in the webpack configuration file. A review found no evidence the exposed tokens were used by unauthorized parties...

Malicious code in webpack-cil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60f6914f58bbdb3feffdb94d542f84c310b43a5ad07f7b980f8c3d0a1b47288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7099 Malicious code in webpack-3undle-analyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16a28366a4a6239f009a0f84d27a1ba4190b2a996fe943e1e342a7b8afce51f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7100 Malicious code in webpack-cil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60f6914f58bbdb3feffdb94d542f84c310b43a5ad07f7b980f8c3d0a1b47288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7105 Malicious code in webpback-dev-esrver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a8d0d272d86340f504944bad6bcbfca405fd215d44bdb0a9b2e77110713c88a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-3undle-analyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16a28366a4a6239f009a0f84d27a1ba4190b2a996fe943e1e342a7b8afce51f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

animation-directive (>=1.0.0 <=1.1.1), lrc-common (=1.1.1) +1 more potentially affected by unknown CVE via webpack-cil (=0.0.1-security)

webpack-cil NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webpack-cil and may be impacted: - animation-directive =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7100...

MAL-2022-7054 Malicious code in wcebpack-bunde-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a4300818daab208570421a84bcdd8e7b4950dcae1e6a5dd08f17d9e135497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7088 Malicious code in weback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12f7ede9303bbd7994726864d2d5d93ad95b6c3eb6ffd5ea40d292fbf4b682fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6741 Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5475 Malicious code in progressbr-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43615dd79938c73f8d450d54000bb3168c08f0f78d1110e17e53fb4933ee0c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fork-ts-checker-webpack-lugin-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3105 Malicious code in fork-ts-checker-webpack-lugin-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...