En resumen
- CVE-2022-37623 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a browserify-shim (browserify-shim project), browserify-shim.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 74.1% de las vulnerabilidades.
- Solución: actualizar a 3.8.16 o posterior.
Description
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.
NVD description
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free