Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/loader-utils@2.0.3
purl pkg:npm/loader-utils@2.0.3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-fnnx-s2c7-xyfh Prototype pollution in webpack loader-utils Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils prior to version 2.0.3 via the name variable in parseQuery.js. CVE-2022-37601
GHSA-76p3-8jx3-jpfq

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T21:28:00.118976+00:00 GitLab Importer Fixing VCID-fnnx-s2c7-xyfh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/loader-utils/CVE-2022-37601.yml 38.1.0
2026-04-01T16:03:39.277952+00:00 GHSA Importer Fixing VCID-fnnx-s2c7-xyfh https://github.com/advisories/GHSA-76p3-8jx3-jpfq 38.0.0
2026-04-01T13:04:48.014931+00:00 GithubOSV Importer Fixing VCID-fnnx-s2c7-xyfh https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/10/GHSA-76p3-8jx3-jpfq/GHSA-76p3-8jx3-jpfq.json 38.0.0