Description
Prototype pollution vulnerability in function resolveShims
in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k
variable in resolve-shims.js.
Recommendation
Update the browserify-shim
package to the latest compatible version. Followings are version details:
- Affected version(s): <= 3.8.15
- Patched version(s): 3.8.16
References
Related Issues
- Vite's `server.fs` settings were not applied to HTML files - CVE-2025-58752
- Trix editor subject to XSS vulnerabilities on copy & paste - CVE-2024-53847
- Knwl.js Regular Expression Denial of Service vulnerability - CVE-2020-26306
- VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability - CVE-2024-29271
- Tags:
- npm
- browserify-shim
Anything's wrong? Let us know Last updated on April 22, 2024