Skip to content
OpenAdvisories

Package · npm

steal

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-37265

    steal vulnerable to Prototype Pollution via alias variable

    Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.

    steal npm
  • Critical 9.8
    CVE-2022-37258

    steal vulnerable to Prototype Pollution

    Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.

    steal npm
  • Critical 9.8
    CVE-2022-37264

    steal vulnerable to Prototype Pollution via optionName variable

    Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.

    steal npm
  • Critical 9.8
    CVE-2022-37257

    steal vulnerable to Prototype Pollution via requestedVersion variable

    Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.

    steal npm
  • Critical 9.8
    CVE-2022-37266

    steal vulnerable to Prototype Pollution via key variable in babel.js

    Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.

    steal npm