CVE-2023-49800

nuxt-api-party is an open source module to proxy API requests. The library allows the user to send many options directly to ofetch. There is no filter on which options are available. We can abuse the retry logic to cause the server to crash from a stack overflow. fetchOptions are obtained directl...

PT-2023-31359

Name of the Vulnerable Software and Affected Versions nuxt-api-party versions prior to 0.22.1 Description The issue concerns the nuxt-api-party module, which allows users to proxy API requests. It lacks a filter on options sent to ofetch, enabling the abuse of retry logic to cause a server crash...