Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-37617 EUVD-2022-7054GHSA-866w-wm4h-95c6

thlorenz browserify-shim vulnerable to prototype pollution

Published Oct 11, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js.

Affected packages

EcosystemPackageAffectedFixedRecord
npm browserify-shim < 3.8.16 3.8.16 GHSA-866w-wm4h-95c6

References