Security Advisories for @nuxt/webpack-builder in npm
Moderate
about 2 months ago
@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)
npm
@nuxt/rspack-builder, @nuxt/webpack-builder
Moderate
2 months ago
Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)
npm
@nuxt/webpack-builder, @nuxt/rspack-builder
Potential
Potential
Moderate
over 1 year ago
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
npm
@nuxt/rspack-builder, @nuxt/webpack-builder
Potential
Moderate
over 1 year ago
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
npm
@nuxt/vite-builder
Potential
Critical
almost 2 years ago
Nuxt vulnerable to remote code execution via the browser when running the test locally
npm
nuxt
Potential
Moderate
almost 2 years ago
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
npm
nuxt
Potential
Potential