[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-37599":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":94,"aliases":95,"duplicate_of":9,"upstream":97,"downstream":98,"duplicates":105,"related":106,"reserved_at":9,"published_at":108,"modified_at":109,"state":110,"summary":111,"references_raw":120,"kevs":195,"epss":196,"epss_history":199,"metrics":463,"affected":478},"CVE-2022-37599","A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.",null,[11,24],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.","weakness","Draft","Base","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-492","Regular Expression Exponential Blowup",[],{"_key":25,"id":25,"name":26,"description":27,"type":15,"status":16,"abstraction":28,"likelihood_of_exploit":18,"capec":29},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","Class",[30,34,92],{"id":31,"name":32,"techniques":33},"CAPEC-147","XML Ping of the Death",[],{"id":35,"name":36,"techniques":37},"CAPEC-227","Sustained Client Engagement",[38],{"id":39,"name":40,"tactics":41,"countermeasures":45},"T1499","Endpoint Denial of Service",[42],{"id":43,"name":44},"TA0105","Impact",[46,51,55,59,63,67,71,75,79,83,88],{"id":47,"name":48,"tactic":49},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":50},"Detect",{"id":52,"name":53,"tactic":54},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":50},{"id":56,"name":57,"tactic":58},"D3-CSPP","Client-server Payload Profiling",{"name":50},{"id":60,"name":61,"tactic":62},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":50},{"id":64,"name":65,"tactic":66},"D3-NTSA","Network Traffic Signature Analysis",{"name":50},{"id":68,"name":69,"tactic":70},"D3-APCA","Application Protocol Command Analysis",{"name":50},{"id":72,"name":73,"tactic":74},"D3-NTCD","Network Traffic Community Deviation",{"name":50},{"id":76,"name":77,"tactic":78},"D3-RTSD","Remote Terminal Session Detection",{"name":50},{"id":80,"name":81,"tactic":82},"D3-ISVA","Inbound Session Volume Analysis",{"name":50},{"id":84,"name":85,"tactic":86},"D3-NTF","Network Traffic Filtering",{"name":87},"Isolate",{"id":89,"name":90,"tactic":91},"D3-ITF","Inbound Traffic Filtering",{"name":87},{"id":21,"name":22,"techniques":93},[],[],[96],"GHSA-hhq3-ff78-jv3g",[],[99,101,103],{"_key":100},"MGASA-2025-0194",{"_key":102},"DEBIAN-CVE-2022-37599",{"_key":104},"UBUNTU-CVE-2022-37599",[],[107],{"_key":100},"2022-10-11T00:00:00.000Z","2025-11-04T18:14:20.740Z","Modified",{"cisa_kev":112,"cisa_ransomware":112,"cisa_vendor":9,"epss_severity":113,"epss_score":114,"severity":115,"severity_score":116,"severity_version":117,"severity_source":118,"severity_vector":119,"severity_status":110},false,"low",0.04206,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[121,129,133,138,143,148,152,156,161,165,169,173,178,182,186,190],{"url":122,"sources":123,"tags":126},"https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L38",[124,118,125],"cve.org","osv_npm",[127,128],"Third Party Advisory","WEB",{"url":130,"sources":131,"tags":132},"https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L83",[124,118,125],[127,128],{"url":134,"sources":135,"tags":136},"https://github.com/webpack/loader-utils/issues/211",[124,118,125],[137,127,128],"Issue Tracking",{"url":139,"sources":140,"tags":141},"https://github.com/webpack/loader-utils/issues/216",[124,118,125],[137,142,127,128],"Patch",{"url":144,"sources":145,"tags":146},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/",[124,118],[147],"Vendor Advisory",{"url":149,"sources":150,"tags":151},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/",[124,118],[147],{"url":153,"sources":154,"tags":155},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/",[124,118],[],{"url":157,"sources":158,"tags":159},"https://nvd.nist.gov/vuln/detail/CVE-2022-37599",[125],[160],"Advisory",{"url":162,"sources":163,"tags":164},"https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa",[125],[128],{"url":166,"sources":167,"tags":168},"https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb",[125],[128],{"url":170,"sources":171,"tags":172},"https://github.com/webpack/loader-utils/commit/d2d752d59629daee38f34b24307221349c490eb1",[125],[128],{"url":174,"sources":175,"tags":176},"https://github.com/webpack/loader-utils",[125],[177],"PACKAGE",{"url":179,"sources":180,"tags":181},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2",[125],[128],{"url":183,"sources":184,"tags":185},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ",[125],[128],{"url":187,"sources":188,"tags":189},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ",[125],[128],{"url":191,"sources":192,"tags":194},"https://www.wordfence.com/threat-intel/vulnerabilities/id/2954a007-37ac-4811-a258-b3fdd738043f",[193],"wordfence",[147],[],{"date":197,"score":114,"percentile":198},"2026-06-04",0.88932,[200,204,208,210,213,216,218,220,223,226,229,232,235,238,240,244,246,249,253,256,259,262,265,267,270,273,276,279,282,284,287,290,293,296,298,300,303,306,309,312,315,317,319,322,325,328,332,335,338,340,343,346,349,351,354,357,360,363,366,370,373,376,379,382,386,389,392,395,397,400,402,405,409,412,415,418,421,424,427,429,432,435,438,441,444,447,451,454,457,460],{"date":201,"score":202,"percentile":203},"2025-11-04",0.07118,0.91134,{"date":205,"score":206,"percentile":207},"2025-11-05",0.06187,0.90414,{"date":209,"score":206,"percentile":207},"2025-11-06",{"date":211,"score":206,"percentile":212},"2025-11-07",0.90422,{"date":214,"score":206,"percentile":215},"2025-11-08",0.90424,{"date":217,"score":206,"percentile":212},"2025-11-09",{"date":219,"score":206,"percentile":212},"2025-11-10",{"date":221,"score":206,"percentile":222},"2025-11-11",0.90421,{"date":224,"score":206,"percentile":225},"2025-11-12",0.90428,{"date":227,"score":206,"percentile":228},"2025-11-13",0.90432,{"date":230,"score":206,"percentile":231},"2025-11-14",0.90434,{"date":233,"score":206,"percentile":234},"2025-11-15",0.90431,{"date":236,"score":206,"percentile":237},"2025-11-16",0.90435,{"date":239,"score":206,"percentile":228},"2025-11-17",{"date":241,"score":242,"percentile":243},"2025-11-18",0.03545,0.8649,{"date":245,"score":242,"percentile":243},"2025-11-19",{"date":247,"score":242,"percentile":248},"2025-11-20",0.86491,{"date":250,"score":251,"percentile":252},"2025-11-21",0.04,0.87946,{"date":254,"score":251,"percentile":255},"2025-11-22",0.87943,{"date":257,"score":251,"percentile":258},"2025-11-23",0.87938,{"date":260,"score":251,"percentile":261},"2025-11-24",0.87939,{"date":263,"score":251,"percentile":264},"2025-11-25",0.8794,{"date":266,"score":251,"percentile":261},"2025-11-26",{"date":268,"score":251,"percentile":269},"2025-11-27",0.87941,{"date":271,"score":251,"percentile":272},"2025-11-28",0.87929,{"date":274,"score":251,"percentile":275},"2025-11-29",0.88005,{"date":277,"score":251,"percentile":278},"2025-11-30",0.88003,{"date":280,"score":251,"percentile":281},"2025-12-01",0.88062,{"date":283,"score":251,"percentile":281},"2025-12-02",{"date":285,"score":251,"percentile":286},"2025-12-03",0.8806,{"date":288,"score":251,"percentile":289},"2025-12-04",0.87998,{"date":291,"score":251,"percentile":292},"2025-12-05",0.88001,{"date":294,"score":251,"percentile":295},"2025-12-06",0.87999,{"date":297,"score":251,"percentile":295},"2025-12-07",{"date":299,"score":251,"percentile":295},"2025-12-08",{"date":301,"score":251,"percentile":302},"2025-12-09",0.88012,{"date":304,"score":251,"percentile":305},"2025-12-10",0.88032,{"date":307,"score":251,"percentile":308},"2025-12-11",0.88035,{"date":310,"score":251,"percentile":311},"2025-12-12",0.8804,{"date":313,"score":251,"percentile":314},"2025-12-13",0.88041,{"date":316,"score":251,"percentile":311},"2025-12-14",{"date":318,"score":251,"percentile":311},"2025-12-15",{"date":320,"score":251,"percentile":321},"2025-12-16",0.88045,{"date":323,"score":251,"percentile":324},"2025-12-17",0.88049,{"date":326,"score":251,"percentile":327},"2025-12-18",0.88057,{"date":329,"score":330,"percentile":331},"2025-12-19",0.04106,0.88232,{"date":333,"score":330,"percentile":334},"2025-12-20",0.88231,{"date":336,"score":330,"percentile":337},"2025-12-21",0.88238,{"date":339,"score":330,"percentile":337},"2025-12-22",{"date":341,"score":330,"percentile":342},"2025-12-23",0.88243,{"date":344,"score":330,"percentile":345},"2025-12-24",0.88245,{"date":347,"score":330,"percentile":348},"2025-12-25",0.88255,{"date":350,"score":330,"percentile":348},"2025-12-26",{"date":352,"score":330,"percentile":353},"2025-12-27",0.88297,{"date":355,"score":330,"percentile":356},"2025-12-28",0.88251,{"date":358,"score":330,"percentile":359},"2025-12-29",0.88246,{"date":361,"score":330,"percentile":362},"2025-12-30",0.88253,{"date":364,"score":330,"percentile":365},"2025-12-31",0.88263,{"date":367,"score":368,"percentile":369},"2026-01-01",0.03287,0.86878,{"date":371,"score":368,"percentile":372},"2026-01-02",0.8688,{"date":374,"score":368,"percentile":375},"2026-01-03",0.86881,{"date":377,"score":368,"percentile":378},"2026-01-04",0.86818,{"date":380,"score":368,"percentile":381},"2026-01-05",0.86814,{"date":383,"score":384,"percentile":385},"2026-01-06",0.03201,0.86615,{"date":387,"score":384,"percentile":388},"2026-01-07",0.86616,{"date":390,"score":384,"percentile":391},"2026-01-08",0.86623,{"date":393,"score":384,"percentile":394},"2026-01-09",0.86624,{"date":396,"score":384,"percentile":394},"2026-01-10",{"date":398,"score":384,"percentile":399},"2026-01-11",0.86618,{"date":401,"score":384,"percentile":385},"2026-01-12",{"date":403,"score":384,"percentile":404},"2026-01-13",0.86611,{"date":406,"score":407,"percentile":408},"2026-01-14",0.02956,0.86063,{"date":410,"score":407,"percentile":411},"2026-01-15",0.86062,{"date":413,"score":407,"percentile":414},"2026-01-16",0.86067,{"date":416,"score":407,"percentile":417},"2026-01-17",0.8607,{"date":419,"score":407,"percentile":420},"2026-01-18",0.86071,{"date":422,"score":407,"percentile":423},"2026-01-19",0.86066,{"date":425,"score":407,"percentile":426},"2026-01-20",0.86065,{"date":428,"score":407,"percentile":420},"2026-01-21",{"date":430,"score":407,"percentile":431},"2026-01-22",0.86076,{"date":433,"score":407,"percentile":434},"2026-01-23",0.8609,{"date":436,"score":407,"percentile":437},"2026-01-24",0.86098,{"date":439,"score":407,"percentile":440},"2026-01-25",0.86093,{"date":442,"score":407,"percentile":443},"2026-01-26",0.86091,{"date":445,"score":407,"percentile":446},"2026-01-27",0.86096,{"date":448,"score":449,"percentile":450},"2026-01-28",0.03036,0.86292,{"date":452,"score":449,"percentile":453},"2026-01-29",0.86295,{"date":455,"score":449,"percentile":456},"2026-01-30",0.86299,{"date":458,"score":449,"percentile":459},"2026-01-31",0.863,{"date":461,"score":449,"percentile":462},"2026-02-01",0.86365,[464,469,471],{"source":118,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":465,"cvss_v4_0":9},{"baseScore":116,"baseSeverity":466,"vectorString":119,"impactScore":467,"exploitabilityScore":468},"HIGH",6,10,{"source":125,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":470,"cvss_v4_0":9},{"baseScore":116,"baseSeverity":9,"vectorString":119,"impactScore":467,"exploitabilityScore":468},{"source":193,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":472,"cvss_v4_0":9},{"baseScore":473,"baseSeverity":474,"vectorString":475,"impactScore":476,"exploitabilityScore":477},3.7,"LOW","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",2.3,5.6,[479,500,511,520,528,536],{"ecosystem":480,"name":481,"vendor":480,"product":481,"cpe_part":9,"purl_type":482,"purl_namespace":9,"purl_name":481,"source":9,"versions":483},"Npm","loader-utils","npm",[484,492,496],{"version":485,"is_range":486,"range_type":487,"version_start":488,"version_start_type":489,"version_end":490,"version_end_type":491,"fixed_in":9},"gte1_0_0_lt1_4_2",true,"semver","1.0.0","including","1.4.2","excluding",{"version":493,"is_range":486,"range_type":487,"version_start":494,"version_start_type":489,"version_end":495,"version_end_type":491,"fixed_in":9},"gte2_0_0_lt2_0_4","2.0.0","2.0.4",{"version":497,"is_range":486,"range_type":487,"version_start":498,"version_start_type":489,"version_end":499,"version_end_type":491,"fixed_in":9},"gte3_0_0_lt3_2_1","3.0.0","3.2.1",{"ecosystem":9,"name":481,"vendor":501,"product":481,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":503},"webpack.js","a",[504,507,509],{"version":505,"is_range":486,"range_type":506,"version_start":488,"version_start_type":489,"version_end":490,"version_end_type":491,"fixed_in":9},"gte1.0.0_lt1.4.2","cpe",{"version":508,"is_range":486,"range_type":506,"version_start":494,"version_start_type":489,"version_end":495,"version_end_type":491,"fixed_in":9},"gte2.0.0_lt2.0.4",{"version":510,"is_range":486,"range_type":506,"version_start":498,"version_start_type":489,"version_end":499,"version_end_type":491,"fixed_in":9},"gte3.0.0_lt3.2.1",{"ecosystem":9,"name":512,"vendor":513,"product":514,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":515},"ElasticPress","wordpress","elasticpress",[516],{"version":517,"is_range":486,"range_type":193,"version_start":9,"version_start_type":9,"version_end":518,"version_end_type":489,"fixed_in":519},">=*,\u003C=4.3.1","4.3.1","4.4.0",{"ecosystem":9,"name":521,"vendor":513,"product":522,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":523},"Insert Special Characters","insert-special-characters",[524],{"version":525,"is_range":486,"range_type":193,"version_start":9,"version_start_type":9,"version_end":526,"version_end_type":489,"fixed_in":527},">=*,\u003C=1.0.5","1.0.5","1.0.6",{"ecosystem":9,"name":529,"vendor":513,"product":530,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":531},"Restricted Site Access","restricted-site-access",[532],{"version":533,"is_range":486,"range_type":193,"version_start":9,"version_start_type":9,"version_end":534,"version_end_type":489,"fixed_in":535},">=*,\u003C=7.3.4","7.3.4","7.3.5",{"ecosystem":9,"name":537,"vendor":513,"product":538,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":539},"Simple Page Ordering","simple-page-ordering",[540],{"version":541,"is_range":486,"range_type":193,"version_start":9,"version_start_type":9,"version_end":542,"version_end_type":489,"fixed_in":543},">=*,\u003C=2.4.3","2.4.3","2.4.4"]