Is loader-utils 3.2 vulnerable?
npm · 3 releases from 3.2.0 to 3.2.2 · latest loader-utils is 3.3.1 · checked 1 Nov 2026
No known advisories in the last release
loader-utils 3.2.2, the last 3.2 release, has no known advisories. 2 advisories affect earlier 3.2.x releases, so update to 3.2.2.
Update within 3.2:
npm install loader-utils@3.2.2Fixed within 3.2.x, affecting earlier releases
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable
- Affected
- >=1.0.0 <1.4.2 · >=2.0.0 <2.0.4 · >=3.0.0 <3.2.1
- Fixed in
- 1.4.2, 2.0.4, 3.2.1
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
- Affected
- >=1.0.0 <1.4.2 · >=2.0.0 <2.0.4 · >=3.0.0 <3.2.1
- Fixed in
- 1.4.2, 2.0.4, 3.2.1
Which of your client projects are still on loader-utils 3.2?
NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact loader-utils version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.
Other loader-utils versions
Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the npm registry. Refreshed daily.