CVE-2024-34344
1 advisory.
npm/nuxt CVE-2024-34344: high 8.8, EPSS 0.83%
Nuxt vulnerable to remote code execution via the browser when running the test locally
Action: Upgrade nuxt to 3.12.4 or later.
npm i nuxt@3.12.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.0 | 3.12.4 | - |
Fixed versions
| 3.12.4 |
Sources
- osv: GHSA-v784-fjjh-f8r4
- https://github.com/nuxt/nuxt/security/advisories/GHSA-v784-fjjh-f8r4
- https://nvd.nist.gov/vuln/detail/CVE-2024-34344
- https://github.com/nuxt/nuxt
- https://github.com/nuxt/nuxt/blob/4779f5906fa4d3c784c2e2d6fe5a5c5f181faaec/packages/nuxt/src/app/components/test-component-wrapper.ts#L15-L19
- https://github.com/nuxt/nuxt/blob/4779f5906fa4d3c784c2e2d6fe5a5c5f181faaec/packages/nuxt/src/app/components/test-component-wrapper.ts#L9-L27
CVE-2024-34344 · published · modified · JSON