REDHAT-BUG-2140597: Medium severity webpack loader-utils vulnerability

Published Nov 7, 2022

Updated

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/

Affected Software

1 affected component

webpack loader-utils

Event History

Nov 7, 2022

Data Sourced

via Red Hat·10:39 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2140597?

REDHAT-BUG-2140597 is classified as a Regular expression denial of service (ReDoS) vulnerability.

How do I fix REDHAT-BUG-2140597?

To mitigate REDHAT-BUG-2140597, implement best practices for handling user inputs and ensure proper validation.

Which software is affected by REDHAT-BUG-2140597?

REDHAT-BUG-2140597 affects webpack loader-utils version 2.0.0.

What type of vulnerability is REDHAT-BUG-2140597?

REDHAT-BUG-2140597 is a prototype pollution vulnerability caused by a Regular expression denial of service flaw.

Is there a known exploit for REDHAT-BUG-2140597?

As of now, there are no widely reported exploits specifically targeting the REDHAT-BUG-2140597 vulnerability.