debian · CVE-2022-37598

Quick triage

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-37598 unimportant priority: Debian including 2 source packages (uglify-js, uglifyjs), 7 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): open 7.

Description:

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.