Loader-utils vulnerabilities

3 known vulnerabilities in Loader-utils from Webpack.js. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Loader-utils: Inefficient Regular Expression Complexity

  CVE-2022-37603Oct 14, 2022Webpack.jsEPSS 2.7%

  A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

• 9.8 Critical severity

  Loader-utils: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2022-37601Oct 12, 2022Webpack.jsEPSS 3.5%

  Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

• 7.5 High severity

  Loader-utils: Inefficient Regular Expression Complexity

  CVE-2022-37599Oct 11, 2022Webpack.jsEPSS 2.76%

  A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.