CVE:CVE-2022-37601
CNNVD:CNNVD-202210-748
loader-utils是webpack开源的一个用于 webpack 加载器的实用程序。
webpack loader-utils 2.0.0版本存在安全漏洞，该漏洞源于parseQuery.js的parseQuerys函数中发现包含原型污染漏洞。
solution:Upgrade webpack.js loader-utils to a higher version than 1.4.1,2.0.3,and avoid the version (,1.4.1),[2.0.0,2.0.3); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0