npm/nuxt: low
Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`
Action: Upgrade nuxt to 4.4.7 or later.
npm i nuxt@4.4.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0-alpha.1 | 4.4.7 | - |
Fixed versions
| 4.4.7 |
Sources
- osv: GHSA-rq7w-g337-39qq
- https://github.com/nuxt/nuxt/security/advisories/GHSA-rq7w-g337-39qq
- https://github.com/nuxt/nuxt/pull/35201
- https://github.com/nuxt/nuxt/commit/55c75b78c989b8bd210837b0e5faaebbf2b87b15
- https://github.com/nuxt/nuxt
published · modified · JSON