StealjsCVEs & Vulnerabilities

8 CVEs affecting Stealjs products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

8 CVEs→ All vendors

Most Affected Products

steal 8

CVE-2022-37265CRITICAL

Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.

20 Sep 2022

7.5

CVSS

CVE-2022-37258CRITICAL

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.

15 Sep 2022

7.5

CVSS

CVE-2022-37264CRITICAL

Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js.

15 Sep 2022

7.5

CVSS

CVE-2022-37266CRITICAL

Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.

15 Sep 2022

9.8

CVSS

CVE-2022-37257CRITICAL

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.

15 Sep 2022

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database