Loader-utils CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2022-37599

loader-utils: regular expression denial of service in interpolateName.js

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed

Vendors

Redhat Webpack.js

Products

Jboss Enterprise Bpms Platform Loader-utils

CVE-2022-37603

loader-utils: Regular expression denial of service

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed

Vendors

Redhat Webpack.js

Products

Jboss Data Grid Logging Migration Toolkit Applications and 5 more

CVE-2022-37601

loader-utils: prototype pollution in function parseQuery in parseQuery.js

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed

Vendors

Debian Redhat Webpack.js

Products

Debian Linux Logging Migration Toolkit Applications and 1 more

Page 1 of 1.