Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
uglifyjs project uglifyjs vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-37598
Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.
Uglifyjs Project Uglifyjs 3.13.2
9.8
CVSSv3
CVE-2015-8857
The uglify-js package prior to 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow malicious users to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Java...
Uglifyjs Project Uglifyjs
1 Github repository
7.5
CVSSv3
CVE-2015-8858
The uglify-js package prior to 2.6.0 for Node.js allows malicious users to cause a denial of service (CPU consumption) via crafted input in a parse call, aka a "regular expression denial of service (ReDoS)."
Uglifyjs Project Uglifyjs
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started