GitHub Advisoryadvisory · npm

GHSA-r737-347m-wqc7 thlorenz browserify-shim vulnerable to prototype pollution

CRITICAL Published 2022-10-29 Modified 2024-04-22 Official page ↗
Aliases
CVE-2022-37621
Ecosystem
npm
Packages
browserify-shim
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1321
Reviewed
2024-04-22

Affected packages

• npm browserify-shim: < 3.8.16 → fixed in 3.8.16

Description

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js.

Related

Alias · CVE (1)

  • CVE-2022-37621 Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References