Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2022-10-12

Status

Modified

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

Weaknesses

CWE-1321

Coverage 1

vulnerability

Multiples vulnérabilités dans les produits Atlassian (27 juillet 2026)

Multiple vulnerabilities have been discovered in Atlassian products, including Confluence Data Center and Jira Service Management. These vulnerabilities allow for remote code execution, privilege escalation, denial of se…

CERT-FR · Jul 27, 2026 High

CVE-2022-37599CVE-2022-37601CVE-2022-37603vulnerabilitysupply-chaindata-breach

All articles mentioning it

Advisories and references

• users.encs.concordia.ca/~mmannan/publications/JS-vulnerability-aisac...
• dl.acm.org/doi/abs/10.1145/3488932.3497769
• dl.acm.org/doi/pdf/10.1145/3488932.3497769
• github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6...
• github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6...
• github.com/webpack/loader-utils/issues/212
• github.com/webpack/loader-utils/issues/212#issuecomment-1319192884
• github.com/xmldom/xmldom/issues/436#issuecomment-1319412826
• lists.debian.org/debian-lts-announce/2022/12/msg00044.html
• users.encs.concordia.ca/~mmannan/publications/JS-vulnerability-aisac...