CVE-2022-37598

Published October 20th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.

mishoo/UglifyJS

JavaScript parser / mangler / compressor / beautifier toolkit

GitHub

13.4K