@nuxt/webpack-builder vulnerabilities (npm)
3 vulnerabilities.
-
@nuxt/webpack-buildernpm @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) 5.9 Medium -
@nuxt/webpack-buildernpm Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) 5.9 Medium -
@nuxt/webpack-buildernpm Opening a malicious website while running a Nuxt dev server could allow read-only access to code 5.3 Medium