Uglifyjs Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Uglifyjs Project records in CISA KEV

No Uglifyjs Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uglifyjs 3 records HIGH

Records

3 records in Uglifyjs · all components

TI-2022-17513 CVE-2022-37598 · GHSA-wx5g-37jh-9gcr

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2…

HIGH 82

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01989 Published 2022-10-20 No fix listed CWE-1321

TI-2015-07287 CVE-2015-8857 · GHSA-34r7-q49f-h37c

The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean…

MEDIUM 48

The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03559 Published 2017-01-23 Fixed in 2.4.24, 2.7.2 CWE-254

TI-2015-07288 CVE-2015-8858 · GHSA-c9f4-xj24-8jqx

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of…

LOW 37

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service (CPU consumption) via crafted input in a parse call, aka a "regular expression denial of service (ReDoS)."

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02358 Published 2017-01-23 Fixed in 2.6.0 CWE-399

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0