GitHub Advisoryadvisory · npm

GHSA-cfgr-75jx-h88g thlorenz browserify-shim vulnerable to prototype pollution

CRITICAL Published 2022-10-31 Modified 2024-04-22 Official page ↗
Aliases
CVE-2022-37623
Ecosystem
npm
Packages
browserify-shim
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1321
Reviewed
2024-04-22

Affected packages

• npm browserify-shim: < 3.8.16 → fixed in 3.8.16

Description

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.

Related

Alias · CVE (1)

  • CVE-2022-37623 Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References