CVE-2022-37598

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-37598

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-37598.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-37598

Published

2022-10-20T11:15:10Z

Modified

2025-07-03T02:08:41.231189Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.

References

Affected packages

Debian:11 / uglify-js

Package

Name: uglify-js
Purl: pkg:deb/debian/uglify-js?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.12.8-1

3.13.0-1

3.13.4-1

3.14.1-1

3.14.2-1

3.14.3-1

3.14.4-1

3.14.4-2

3.14.5-1

3.15.0-1

3.15.1-1

3.15.2-1

3.15.3-1

3.15.4-1

3.16.0-1

3.16.1-1

3.16.3-1

3.17.0-1

3.17.1-1

3.17.2-1

3.17.3-1

3.17.3-2

3.17.4-1

3.17.4-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / uglify-js

Package

Name: uglify-js
Purl: pkg:deb/debian/uglify-js?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.17.4-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / uglify-js

Package

Name: uglify-js
Purl: pkg:deb/debian/uglify-js?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.17.4-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:11 / uglifyjs

Package

Name: uglifyjs
Purl: pkg:deb/debian/uglifyjs?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.8.29-8

3.*

3.3.10-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / uglifyjs

Package

Name: uglifyjs
Purl: pkg:deb/debian/uglifyjs?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.90-1

1.*

1.0-1

1.0.1-1

1.0.3-1

1.0.4-1

1.0.6-1

1.1-1

1.1.1-1

1.1.1-2

1.2.3-1

1.2.5-1

1.2.6-1

1.2.6-2

1.2.6-3

1.3.3-1

1.3.4-1~bpo7+1

1.3.4-1

1.3.5-1

2.*

2.4.13-1

2.4.13-2

2.4.15-1

2.4.15-2

2.4.15-3

2.4.15-4

2.4.15-5

2.4.15-6

2.4.15-6.1

2.7.4-1

2.7.5-1

2.7.5-2

2.8.22-1

2.8.29-1

2.8.29-2

2.8.29-3

2.8.29-4

2.8.29-5

2.8.29-6

2.8.29-7

2.8.29-8

3.*

3.3.10-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Git / github.com/mishoo/uglifyjs

Affected ranges

Type: GIT
Repo: https://github.com/mishoo/uglifyjs
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

9c01511f840aa8675f6dab4358b96d821283597a

Affected versions

harmony-v2.*

harmony-v2.8.10

v2.*

v2.0

v2.1

v2.1.1

v2.1.10

v2.1.11

v2.1.2

v2.1.3

v2.1.4

v2.1.5

v2.1.6

v2.1.7

v2.1.8

v2.1.9

v2.2.0

v2.2.1

v2.2.2

v2.2.3

v2.2.4

v2.2.5

v2.3

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.4

v2.3.5

v2.3.6

v2.4.0

v2.4.1

v2.4.10

v2.4.11

v2.4.12

v2.4.13

v2.4.14

v2.4.15

v2.4.16

v2.4.18

v2.4.19

v2.4.2

v2.4.20

v2.4.21

v2.4.22

v2.4.23

v2.4.24

v2.4.3

v2.4.4

v2.4.5

v2.4.6

v2.4.7

v2.4.8

v2.4.9

v2.5.0

v2.6.0

v2.6.1

v2.6.2

v2.6.3

v2.6.4

v2.7.0

v2.7.1

v2.7.2

v2.7.3

v2.7.4

v2.7.5

v2.8.0

v2.8.1

v2.8.10

v2.8.11

v2.8.12

v2.8.13

v2.8.14

v2.8.15

v2.8.16

v2.8.17

v2.8.18

v2.8.19

v2.8.2

v2.8.20

v2.8.21

v2.8.22

v2.8.3

v2.8.4

v2.8.5

v2.8.6

v2.8.7

v2.8.8

v2.8.9

v3.*

v3.0.0

v3.0.1

v3.0.10

v3.0.11

v3.0.12

v3.0.13

v3.0.14

v3.0.15

v3.0.16

v3.0.17

v3.0.18

v3.0.19

v3.0.2

v3.0.20

v3.0.21

v3.0.22

v3.0.23

v3.0.24

v3.0.25

v3.0.26

v3.0.27

v3.0.28

v3.0.3

v3.0.4

v3.0.5

v3.0.6

v3.0.7

v3.0.8

v3.0.9

v3.1.0

v3.1.1

v3.1.10

v3.1.2

v3.1.3

v3.1.4

v3.1.5

v3.1.6

v3.1.7

v3.1.8

v3.1.9

v3.10.0

v3.10.1

v3.10.2

v3.10.3

v3.10.4

v3.11.0

v3.11.1

v3.11.2

v3.11.3

v3.11.4

v3.11.5

v3.11.6

v3.12.0

v3.12.1

v3.12.2

v3.12.3

v3.12.4

v3.12.5

v3.12.6

v3.12.7

v3.12.8

v3.13.0

v3.13.1

v3.13.2

v3.2.0

v3.2.1

v3.2.2

v3.3.0

v3.3.1

v3.3.10

v3.3.11

v3.3.12

v3.3.13

v3.3.14

v3.3.15

v3.3.16

v3.3.17

v3.3.18

v3.3.19

v3.3.2

v3.3.20

v3.3.21

v3.3.22

v3.3.23

v3.3.24

v3.3.25

v3.3.26

v3.3.27

v3.3.28

v3.3.3

v3.3.4

v3.3.5

v3.3.6

v3.3.7

v3.3.8

v3.3.9

v3.4.0

v3.4.1

v3.4.10

v3.4.2

v3.4.3

v3.4.4

v3.4.5

v3.4.6

v3.4.7

v3.4.8

v3.4.9

v3.5.0

v3.5.1

v3.5.10

v3.5.11

v3.5.12

v3.5.13

v3.5.14

v3.5.15

v3.5.2

v3.5.3

v3.5.4

v3.5.5

v3.5.6

v3.5.7

v3.5.8

v3.5.9

v3.6.0

v3.6.1

v3.6.2

v3.6.3

v3.6.4

v3.6.5

v3.6.6

v3.6.7

v3.6.8

v3.6.9

v3.7.0

v3.7.1

v3.7.2

v3.7.3

v3.7.4

v3.7.5

v3.7.6

v3.7.7

v3.8.0

v3.8.1

v3.9.0

v3.9.1

v3.9.2

v3.9.3

v3.9.4