Description
Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | steal | <= 2.3.0 | — | GHSA-wc4x-qmr2-rj8h |
Critical · 9.8
CVE-2022-37265
EUVD-2022-6961GHSA-wc4x-qmr2-rj8h
steal vulnerable to Prototype Pollution via alias variable
Published Sep 20, 2022 · Updated May 28, 2025 · Assigned by mitre