← Database

CVE-2022-37598

CRITICAL CVSS: 9.8 Published: 2022-10-20 Modified: 2026-06-17

Description

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.

Affected Platforms

Uglifyjs Project Uglifyjs

Weakness Type

CWE-1321

References