critical9.8
CVE-2022-37609
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js.
Impact
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Js-Beautify Project | Js-Beautify | Version 1.13.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/beautify-web/js-beautify/blob/6fa891e982cc3d615eed9a1a20a4fc50721bff16/js/src/core/options.js#L167
- https://github.com/beautify-web/js-beautify/blob/6fa891e982cc3d615eed9a1a20a4fc50721bff16/js/src/core/options.js#L167.aa
- https://github.com/beautify-web/js-beautify/issues/2106
- https://github.com/beautify-web/js-beautify/blob/6fa891e982cc3d615eed9a1a20a4fc50721bff16/js/src/core/options.js#L167
- https://github.com/beautify-web/js-beautify/blob/6fa891e982cc3d615eed9a1a20a4fc50721bff16/js/src/core/options.js#L167.aa
- https://github.com/beautify-web/js-beautify/issues/2106