PT-2025-5844 · Nuxt.Js · @Nuxtjs/Mdc

Name of the Vulnerable Software and Affected Versions: @nuxtjs/mdc versions prior to 0.13.3 Description: The issue arises from unsafe parsing logic of the URL from markdown, which can lead to arbitrary JavaScript code execution due to a bypass of the existing guards around the javascript: protoco...

Malicious code in nuxtjs_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd288c0cffc74a3b962530a540a7cc62f2288445fd2f50c7aded40160d08871 The OpenSSF Package Analysis project identified 'nuxtjsdotenv' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...

org.webjars.npm:nuxtjs__vuetify (=0.4.2) potentially affected by CVE-2022-25873 via org.webjars.npm:vuetify (=2.0.0-beta.9)

org.webjars.npm:vuetify MAVEN version =2.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vuetify and may be impacted: - org.webjars.npm:nuxtjsvuetify =0.4.2 Source cves: CVE-2022-25873 Source advisory: OSV:GHSA-Q4Q5-C5CV-2P68...