MAL-2025-21905 Malicious code in gravity-sqlite-got-nuxtjs (npm)

The package gravity-sqlite-got-nuxtjs was found to contain malicious code...

MAL-2025-29015 Malicious code in pegasus-halley-nuxtjs-remark (npm)

The package pegasus-halley-nuxtjs-remark was found to contain malicious code...

MAL-2025-20798 Malicious code in fornax-mantle-brane-nuxtjs (npm)

The package fornax-mantle-brane-nuxtjs was found to contain malicious code...

MAL-2025-27932 Malicious code in nuxtjs-bellatrix-slides-bellatrix (npm)

The package nuxtjs-bellatrix-slides-bellatrix was found to contain malicious code...

MAL-2025-22134 Malicious code in halley-cli-nuxtjs-pegasus (npm)

The package halley-cli-nuxtjs-pegasus was found to contain malicious code...

Malicious code in halley-cli-nuxtjs-pegasus (npm)

The package halley-cli-nuxtjs-pegasus was found to contain malicious code...

Malicious code in nuxtjs-galaxy-backend-genomics (npm)

The package nuxtjs-galaxy-backend-genomics was found to contain malicious code...

MAL-2025-27934 Malicious code in nuxtjs-galaxy-backend-genomics (npm)

The package nuxtjs-galaxy-backend-genomics was found to contain malicious code...

MAL-2025-27933 Malicious code in nuxtjs-event-zenobia-quasar (npm)

The package nuxtjs-event-zenobia-quasar was found to contain malicious code...

MAL-2025-27935 Malicious code in nuxtjs-nanotechnology-heka-eclipse (npm)

The package nuxtjs-nanotechnology-heka-eclipse was found to contain malicious code...

MAL-2025-38220 Malicious code in venus-selenium-semantic-release-nuxtjs (npm)

The package venus-selenium-semantic-release-nuxtjs was found to contain malicious code...

Malicious code in accretion-nightmare-rate-limiter-nuxtjs (npm)

The package accretion-nightmare-rate-limiter-nuxtjs was found to contain malicious code...

@abbele/core (>=0.0.1 <=0.0.10), @abbele/uikit (>=0.0.1 <=0.1.2) +40 more potentially affected by CVE-2025-54075 via @nuxtjs/mdc (>=0.10.0 <=0.17.0)

@nuxtjs/mdc NPM version =0.10.0, =0.0.1, =0.0.1, =1.0.16, =1.0.16, =3.0.0-1a33690, =3.0.0-1a33690, =0.0.1, =0.13.1, =0.0.90, =0.22.2 and more Source cves: CVE-2025-54075 Source advisory: OSV:GHSA-CJ6R-RRR9-FG82...

CVE-2025-54075 mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a element. The tag rewrites how all subsequent relative...

Malicious code in sample-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0517b841d711c41128943f51ef66b39a1841448b03eb175aec218d141d8fcdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5793 Malicious code in sample-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0517b841d711c41128943f51ef66b39a1841448b03eb175aec218d141d8fcdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24981 Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the javascript: protocol scheme in the URL. Th...

CVE-2025-24981

The CVE-2025-24981 vulnerability affects MDC (the Markdown-to-Vue integration used in @nuxtjs/mdc). The root cause is unsafe URL parsing in the parser (props.ts) that uses a deny-list for protocols (e.g., javascript:) but can be bypassed when the attacker provides hex-encoded HTML entities within...

CVE-2025-24981 Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the javascript: protocol scheme in the URL. Th...

GHSA-J82M-PC2V-2484 Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc

Summary An unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the javascript: protocol scheme in the URL. Details The parsing logic implement at...