webpack

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

webpack records in CISA KEV

No webpack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webpack-dev-server 9 records MEDIUM Webpack 4 records MEDIUM Loader-utils 3 records HIGH Webpack-dev-middleware 1 record HIGH

Records

3 records in Loader-utils · all components

TI-2022-17515 CVE-2022-37601 · GHSA-76p3-8jx3-jpfq

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack…

HIGH 82

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03503 Published 2022-10-12 Partial fix · 2.0.3, 1.4.1 CWE-1321

TI-2022-17517 CVE-2022-37603 · GHSA-3rfm-jhwj-7488

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName…

MEDIUM 44

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02702 Published 2022-10-14 Partial fix · 1.4.2, 2.0.4 +1 CWE-1333

TI-2022-17514 CVE-2022-37599 · GHSA-hhq3-ff78-jv3g

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName…

LOW 38

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02761 Published 2022-10-11 Partial fix · 1.4.2, 2.0.4 +1 CWE-1333

Open these records in search →