logo

Database

Prototype Pollution In browserify-shim

Description

thlorenz browserify-shim vulnerable to prototype pollution Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-376232. NVD-2022-376233. OSV-2022-376234. GCVE-2022-37623

References

1. https://github.com/thlorenz/browserify-shim/issues/2482. https://github.com/thlorenz/browserify-shim/pull/2463. https://github.com/thlorenz/browserify-shim/commit/97855e622b6dcd117c77e6583701962ff45e73384. https://github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd9796059798f6c738ea3de8f/lib/resolve-shims.js#L1585. https://github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd9796059798f6c738ea3de8f/lib/resolve-shims.js#L94

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.