Secdevlpr26

The issue is related to a prototype pollution vulnerability in the `resolveShims` function, located in the `resolve-shims.js` file. This vulnerability is exploitable via the `shimPath` variable in `resolve-shims.js`.

A Regular Expression Denial of Service (ReDoS) flaw was found in the `candidate` variable in htmlminifier.js. This issue can cause a denial of service.

The issue is related to a prototype pollution vulnerability in the `resolveShims` function, located in `resolve-shims.js`. This vulnerability is exploitable via the `fullPath` variable in `resolve-shims.js`.

The issue is related to a prototype pollution vulnerability in the karma-runner grunt-karma. It occurs via the `key` variable in `grunt-karma.js`.

The issue is related to a prototype pollution vulnerability in the `enable` function of `mockery.js`, specifically in the `mfncooper` `mockery` commit `822f0566fd6d72af8c943ae5ca2aa92e516aa2cf`. This vulnerability is exploited via the `key` variable in `mockery.js`.

The issue is related to a prototype pollution vulnerability. It is exploited via the `partial` variable in util.js.

A Regular expression denial of service (ReDoS) flaw was found in the `interpolateName` function in `interpolateName.js` in webpack loader-utils via the `url` variable. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take a disproportional amount of time to process.

The issue is related to a prototype pollution vulnerability. It affects the js-beautify library, specifically via the `name` variable in options.js.

A prototype pollution vulnerability exists in the function copy in dom.js via the `p` variable. This issue is disputed by the vendor and some third parties, with attempts to create a proof of concept being unsuccessful.

The issue is related to a prototype pollution vulnerability in the `resolveShims` function within the resolve-shims.js file of thlorenz browserify-shim. This vulnerability is exploited via the `k` variable in resolve-shims.js.

A Regular Expression Denial of Service (ReDoS) flaw was found in the software via the `string` variable in `babel.js`. This issue can cause a denial of service.

The issue is related to a prototype pollution vulnerability in stealjs steal, specifically via the `alias` variable in babel.js. This vulnerability can be exploited, but details about the estimated number of potentially affected devices worldwide or real-world incidents are not provided.

The issue is related to a prototype pollution vulnerability in the `convertLater` function in `npm-convert.js` via the `packageName` variable.

The issue is related to a prototype pollution vulnerability in the `extend` function in `babel.js` within `stealjs steal`. This vulnerability is exploited via the `key` variable in `babel.js`.

A Regular Expression Denial of Service (ReDoS) flaw was found in the input variable in main.js. This issue can cause a denial of service.

The issue is related to a prototype pollution vulnerability in the `convertLater` function in `npm-convert.js`. This vulnerability is exploited via the `requestedVersion` variable in `npm-convert.js`.

The issue is related to a prototype pollution vulnerability. It affects stealjs steal via the `optionName` variable in main.js.

A Regular Expression Denial of Service (ReDoS) flaw was found in the `source` and `sourceWithComments` variables in main.js. This issue can cause a denial of service.