EUVD-2019-0580

Malware in sbrugna...

Malicious code in cassini-jasmine-nuxtjs-sagitta (npm)

The package cassini-jasmine-nuxtjs-sagitta was found to contain malicious code...

CVE-2019-13506

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...

CVE-2023-49799

The CVE-2023-49799 entry concerns the nuxt-api-party module, where a regex-based absolute-URL check (^https?://) can be bypassed by absolute URLs with leading whitespace (e.g., a leading newline). This can allow requests to bypass the whitelist, enabling Server-Side Request Forgery (SSRF) and pot...

Nuxt.js 3.4.x < 3.4.3 Remote Code Execution

Nuxt.js framework versions 3.4.x before 3.4.3 suffer from a Remote Code Execution when running in development mode through the test-component-wrapper component. No source data...

nuxt 代码注入漏洞

Nuxt.js is an open source web application framework based on Vue.js, Node.js, Webpack and Babel.js. A code injection vulnerability exists in versions prior to nuxt 3.5.3. An attacker exploits this vulnerability to perform a code injection attack...

Nuxt.js 跨站脚本漏洞

Nuxt.js is an open source web application framework based on Vue.js, Node.js, Webpack and Babel.js. A cross-site scripting vulnerability exists in Nuxt.js versions prior to 3.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...

Nuxt.js 跨站脚本漏洞

Nuxt.js is an open source web application framework based on Vue.js, Node.js, Webpack and Babel.js. A cross-site scripting vulnerability exists in versions prior to Nuxt.js v3.0.0-rc.13, which stems from cross-site scripting XSS in the DOM...

CVE-2019-13506

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...

CVE-2019-13506

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...

Cross site scripting

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...

CVE-2019-13506

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...