CVE-2022-37617

Name of the Vulnerable Software and Affected Versions thlorenz browserify-shim version 3.8.15

Description The issue is related to a prototype pollution vulnerability in the resolveShims function within the resolve-shims.js file of thlorenz browserify-shim. This vulnerability is exploited via the k variable in resolve-shims.js.

Recommendations For thlorenz browserify-shim version 3.8.15, consider disabling the resolveShims function as a temporary workaround until a patch is available. Restrict access to the resolve-shims.js file to minimize the risk of exploitation. Avoid using the k variable in the affected function until the issue is resolved.