CVE-2022-37617: Browserify-Shim Project Browserify-Shim

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js.

Affected products

• Browserify-Shim Project Browserify-Shim: version 3.8.15 only

Published 2022-10-11. Last modified 2026-06-17.