CVE-2022-37598
Published Oct 20, 2022Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.
Vendor/product archive
uglifyjs_project / uglifyjs CVEs
Beta · best-effort3 CVEs tagged to uglifyjs_project / uglifyjs — 2 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2015-8858
Published Jan 23, 2017The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service (CPU consumption) via crafted input in a parse call, aka a "regular expression denial…
CVE-2015-8857
Published Jan 23, 2017The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security…
Showing 1-3 of 3 CVEsPage 1 of 1