Lucene search

K

GoogleOSV:CVE-2019-13506

HistoryJul 11, 2019 - 2:15 p.m.

CVE-2019-13506

2019-07-1114:15:11

Google

osv.dev

7

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

39.5%

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS.

References

github.com/nuxt/devalue/pull/8

github.com/nuxt/devalue/releases/tag/v1.2.3

github.com/nuxt/nuxt.js/commit/0d5dfe71917191c5b07f373896311f2d8f6b75be

github.com/nuxt/nuxt.js/compare/c0776eb...8d14cd4

github.com/nuxt/nuxt.js/releases/tag/v2.6.2

www.npmjs.com/advisories/814

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

39.5%

Related for OSV:CVE-2019-13506

prion1 cvelist1 veracode1 nodejs1 nvd1 github1 githubexploit1 osv1 cve1