Critical DLA-3258-1 1 CVE

node-loader-utils - security update

Published Dec 31, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	node-loader-utils	1.1.0-2+deb10u1

Vulnerabilities 1

Critical 9.8

CVE-2022-37601

Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

reaper jitsucom-jitsu loader-utils node-loader-utils Debian Ubuntu Azure Linux Wolfi npm

Oct 12, 2022