CVE-2022-37601
12.10.2022, 20:15
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.
Vendor | Product | Version |
---|---|---|
webpack.js | loader-utils | 𝑥 < 1.4.1 |
webpack.js | loader-utils | 2.0.0 ≤ 𝑥 < 2.0.3 |
debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions

Debian Releases

Ubuntu Releases
References