Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
added 2026/05/19 3:51 p.m.26 views

Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)

Summary This is an incomplete fix for GHSA-4gf7-ff8x-hq99. Source code may be stolen during dev when using the webpack / rspack builder if the dev server is bound to a non-loopback address e.g. nuxt dev --host and the developer opens a malicious site on the same network. Details The fix for...

5.9CVSS5.8AI score0.00205EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder