24 matches found
CVE-2019-13506
CVE-2019-13506 affects @nuxt/devalue before 1.2.3 (used in Nuxt.js before 2.6.2). The root cause is mishandling of object keys, leading to Cross-Site Scripting (XSS). Impact: potential XSS via object keys in affected builds; CVSS ~6.1 (NVD v3). Mitigation: upgrade to @nuxt/devalue 1.2.3 or later ...
CVE-2019-13506
@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...
CVE-2018-13506
The CVE-2018-13506 entry refers to a vulnerability in the SDR22 Ethereum token contract where the mintToken function contains an integer overflow. This overflow enables the contract owner to set the balance of an arbitrary user to any value. The affected component is the mintToken function within...