loader-utils
3.3.1 · 5 Jun 2024MIT30.1M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for loader-utils. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 3.3.1 | Safe from 3.2.1 | |
| 2.0.4 | 2 open advisories, worst critical · last release Nov 2022, no longer updated |
- CriticalPrototype pollution in webpack loader-utilsGHSA-76p3-8jx3-jpfq · 13 Oct 2022
- 2.x2.0.0 – 2.0.2Fixed in 2.0.3
- 1.x1.0.0 – 1.4.0Fixed in 1.4.1
- 0.2.x and older0.1.0 – 0.2.17No fix, no longer updated · move to 1.4.1
- Highloader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variableGHSA-3rfm-jhwj-7488 · 14 Oct 2022
- 3.x3.0.0 – 3.2.0Fixed in 3.2.1
- 2.x2.0.0 – 2.0.3Fixed in 2.0.4
- 1.x1.0.0 – 1.4.1Fixed in 1.4.2
- Highloader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)GHSA-hhq3-ff78-jv3g · 12 Oct 2022
- 3.x3.0.0 – 3.2.0Fixed in 3.2.1
- 2.x2.0.0 – 2.0.3Fixed in 2.0.4
- 1.x1.0.0 – 1.4.1Fixed in 1.4.2
Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.