Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-37621 EUVD-2022-7157GHSA-r737-347m-wqc7

thlorenz browserify-shim vulnerable to prototype pollution

Published Oct 28, 2022 · Updated May 7, 2025 · Assigned by mitre

Description

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js.

Affected packages

EcosystemPackageAffectedFixedRecord
npm browserify-shim < 3.8.16 3.8.16 GHSA-r737-347m-wqc7

References