Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-37623 EUVD-2022-7077GHSA-cfgr-75jx-h88g

thlorenz browserify-shim vulnerable to prototype pollution

Published Oct 31, 2022 · Updated May 6, 2025 · Assigned by mitre

Description

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.

Affected packages

EcosystemPackageAffectedFixedRecord
npm browserify-shim < 3.8.16 3.8.16 GHSA-cfgr-75jx-h88g

References