This repository was archived by the owner on Dec 17, 2025. It is now read-only.
[CVE-2022-37601]/Prototype pollution found in parseQuery.jsย #212
Description
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js.
The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/