GitHub Advisoryadvisory · npm

GHSA-866w-wm4h-95c6 thlorenz browserify-shim vulnerable to prototype pollution

CRITICAL Published 2022-10-12 Modified 2024-04-22 Official page ↗
Aliases
CVE-2022-37617
Ecosystem
npm
Packages
browserify-shim
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1321
Reviewed
2024-04-22

Affected packages

• npm browserify-shim: < 3.8.16 → fixed in 3.8.16

Description

Prototype pollution vulnerability in function `resolveShims` in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the `k` variable in resolve-shims.js.

Related

Alias · CVE (1)

  • CVE-2022-37617 Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References