CVE-2023-49799
1 advisory.
npm/nuxt-api-party CVE-2023-49799: high 7.5
SSRF & Credentials Leak
Action: Upgrade nuxt-api-party to 0.22.0 or later.
npm i nuxt-api-party@0.22.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.0 | - |
Fixed versions
| 0.22.0 |
Sources
- osv: GHSA-3wfp-253j-5jxv
- https://github.com/johannschopplich/nuxt-api-party/security/advisories/GHSA-3wfp-253j-5jxv
- https://nvd.nist.gov/vuln/detail/CVE-2023-49799
- https://github.com/johannschopplich/nuxt-api-party/commit/72762a200fc19d997a0f84bce578c28698dc5270
- https://fetch.spec.whatwg.org
- https://fetch.spec.whatwg.org/#http-whitespace-byte
- https://github.com/johannschopplich/nuxt-api-party
- https://github.com/johannschopplich/nuxt-api-party/blob/777462e1e3af1d9f8938aa33f230cd8cb6e0cc9a/src/runtime/server/handler.ts#L31
- https://infra.spec.whatwg.org/#byte-sequence
CVE-2023-49799 · published · modified · JSON