loader-utils

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

High 7.5

CVE-2022-37603

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

loader-utils node-loader-utils node-loader-utils Debian Ubuntu npm

Oct 14, 2022
Critical 9.8

CVE-2022-37601

Prototype pollution in webpack loader-utils

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

loader-utils node-loader-utils node-loader-utils Debian Ubuntu npm

Oct 12, 2022
High 7.5

CVE-2022-37599

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

loader-utils node-loader-utils node-loader-utils Debian Ubuntu npm

Oct 11, 2022