Known Vulnerabilities for products from Stealjs
Listed below are 8 of the newest known vulnerabilities associated with the vendor "Stealjs".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-37266 json | Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js. | 9.8 - CRITICAL | 2022-09-15 | 2022-09-19 |
| CVE-2022-37265 json | Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js. | 9.8 - CRITICAL | 2022-09-20 | 2022-09-22 |
| CVE-2022-37264 json | Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js. | 9.8 - CRITICAL | 2022-09-15 | 2022-09-19 |
| CVE-2022-37262 json | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments va... | 7.5 - HIGH | 2022-09-15 | 2023-08-08 |
| CVE-2022-37260 json | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js. | 7.5 - HIGH | 2022-09-15 | 2023-08-08 |
| CVE-2022-37259 json | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js. | 7.5 - HIGH | 2022-09-20 | 2023-08-08 |
| CVE-2022-37258 json | Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName varia... | 9.8 - CRITICAL | 2022-09-16 | 2022-09-21 |
| CVE-2022-37257 json | Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion ... | 9.8 - CRITICAL | 2022-09-15 | 2022-09-19 |