Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
uglifyjs project uglifyjs vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv2
CVE-2015-8858
The uglify-js package prior to 2.6.0 for Node.js allows malicious users to cause a denial of service (CPU consumption) via crafted input in a parse call, aka a "regular expression denial of service (ReDoS)."
Uglifyjs Project Uglifyjs
1 Github repository
7.5
CVSSv2
CVE-2015-8857
The uglify-js package prior to 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow malicious users to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Java...
Uglifyjs Project Uglifyjs
1 Github repository
NA
CVE-2022-37598
Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.
Uglifyjs Project Uglifyjs 3.13.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started