Description

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

Remediation

References

https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff

https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87

Related Vulnerabilities

CVE-2020-27885 Vulnerability in maven package org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature

CVE-2022-25967 Vulnerability in npm package eta

CVE-2020-28449 Vulnerability in npm package decal

CVE-2021-43788 Vulnerability in npm package nodebb

CVE-2022-2596 Vulnerability in npm package node-fetch

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Exploit Third Party Advisory