CVE-2022-37623: Browserify-Shim Project Browserify-Shim

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.

Affected products

• Browserify-Shim Project Browserify-Shim: version 3.8.15 only

Published 2022-10-31. Last modified 2026-06-17.