@nuxt/rspack-builder vulnerabilities (npm)
3 vulnerabilities.
-
@nuxt/rspack-buildernpm @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) 5.9 Medium -
@nuxt/rspack-buildernpm Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) 5.9 Medium -
@nuxt/rspack-buildernpm Opening a malicious website while running a Nuxt dev server could allow read-only access to code 5.3 Medium