ubuntu · CVE-2022-37599

Quick triage

Priority: medium Published: 2022-10-11 19:15:00 UTC Updated: 2025-07-11 07:51:58 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-37599 medium priority: Ubuntu including 1 source packages (node-loader-utils), 13 status rows across 13 suites (bionic, focal, jammy, kinetic, lunar, mantic, noble, oracular, plucky, questing, trusty, upstream, xenial): ignored 7, needs-triage 6.

Description:

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

cvelogic Threat Intelligence