Lucene search
Johannes LambertsNODEJS:814HistoryApr 10, 2019 - 9:39 p.m.
Cross-Site Scripting
2019-04-1021:39:21
Johannes Lamberts
www.npmjs.com
9
EPSS
0.001
Percentile
39.5%
Overview
Versions of @nuxt/devalue prior to 1.2.3 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization attacker may inject arbitrary JavaScript code through object keys.
Recommendation
Upgrade to version 1.2.3 or later.
References
Related
prion
prion
Cross site scripting
2019-07-11 14:15:00
cvelist
cvelist
CVE-2019-13506
2019-07-11 13:07:05
veracode
veracode
Cross-site Scripting (XSS)
2019-04-16 02:39:40
nvd
nvd
CVE-2019-13506
2019-07-11 14:15:11
osv
osv
Cross-Site Scripting in @nuxt/devalue
2019-07-16 00:42:02
CVE-2019-13506
2019-07-11 14:15:11
cve
cve
CVE-2019-13506
2019-07-11 14:15:11
githubexploit
githubexploit
Exploit for Cross-site Scripting in Nuxtjs Nuxt.Js
2020-12-01 09:18:57
github
github
Cross-Site Scripting in @nuxt/devalue
2019-07-16 00:42:02