Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Summary The POST /nuxtcontent/:collection/query endpoint in @nuxt/content accepts an attacker-controlled sql field from the HTTP request body and executes it against a local SQLite database after passing it through an insufficient validator assertSafeQuery. The validator only blocks a small set o...