Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01486·Published 2022-10-31·Fixed in 3.8.16CWE-1321
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01373·Published 2022-10-28·Fixed in 3.8.16CWE-1321
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01544·Published 2022-10-11·Fixed in 3.8.16CWE-1321