CVE-2024-53384

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...

@assistant-ui/react-ai-sdk (>=0.5.2, <=0.5.4), @avmkit/pipeline (1.0.3) +86 more potentially affected by CVE-2024-53384 via tsup (>=8.0.0, <=8.3.0)

tsup NPM version =8.0.0, =0.5.2, =1.0.1, =1.0.0, =0.0.2, =0.1.5, =1.0.0, =0.0.15, =0.0.0, =1.0.10, =1.4.2, =2.0.0, =2.0.2 and more Source cves: CVE-2024-53384 Source advisory: OSV:GHSA-3MV9-4H5G-VHG3...

CVE-2024-53384

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...

CVE-2024-53384

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...