CVE-2022-37598

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Oct 20, 2022 (Oct 20, 2022)

Modified

Jun 17, 2026

Description

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.

Vendors: uglifyjs project
Products: uglifyjs
Weakness: CWE-1321
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.